CVE-2018-14558 - CVE House
Back to Database
Status published Unknown CVE-2018-14558

An issue was discovered on Tenda AC7 devices with firmware...

Vulnerability Description

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-14558

Credits & Attribution

No credits recorded in the NVD database.

References

More from tenda

View All →
CVE-2022-48130
Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows...
Unknown 0
CVE-2022-47128
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-47127
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-47126
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-47125
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow...
Unknown 0

Affected Vendor

Affected Software

ac7 firmware, ac9 firmware, ac10 firmware
Vulnerable Versions:
0

Timeline

Official Publish: October 30th, 2018
Last Modified: October 21st, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.