{"id":"CVE-2022-35201","aliases":["EUVD-2022-38094","GHSA-fpc9-36gg-rrq8"],"status":"published","title":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","description":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03684,"percentile":0.89769,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-08-19T14:25:08Z","modified":"2026-07-09T01:17:34Z","products":[{"vendor":"tenda","product":"ac18_firmware"}],"references":[{"url":"https://www.tendacn.com/default.html","tags":["x_refsource_MISC","x_transferred","Product"]},{"url":"http://124.222.176.39/21f93b5e3b39b22b6df1e6a9c61ed70d54e8378bbeacd844efff921b9a1a8624/index.html","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35201"},{"url":"http://tenda-ac18.com"},{"url":"https://github.com/advisories/GHSA-fpc9-36gg-rrq8"}],"sources":{"cve":[{"id":"CVE-2022-35201","description":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","status":"published","published":"2022-08-19T14:25:08Z","modified":"2026-07-09T00:20:04.316Z","updated_at":"2026-11-02T14:34:39.935681Z"}],"euvd":[{"id":"EUVD-2022-38094","description":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","status":"published","published":"2022-08-19T14:25:08Z","modified":"2026-07-09T00:20:04Z","updated_at":"2026-11-02T18:20:07.696389Z"}],"ghsa":[{"id":"GHSA-fpc9-36gg-rrq8","title":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","description":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","status":"published","published":"2022-08-20T00:00:40Z","modified":"2023-01-28T05:04:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:44:11.828892Z"}],"nvd":[{"id":"CVE-2022-35201","description":"Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.","status":"published","published":"2022-08-19T15:15:08.417Z","modified":"2026-07-09T01:17:34.73Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:07:25.242752Z"}]}}