CVE-2023-50585 is a critical stack buffer overflow in Tenda A18 router firmware version 15.13.07.09, scored 9.8 by NVD. It sits in the formSetDeviceName function and is reached through the devName parameter. The record names no fixed version, so check Tenda for newer firmware and restrict access to the admin interface.
What's affected
The NVD record names Tenda A18 firmware 15.13.07.09. It describes the flaw as a stack overflow via the devName parameter in the formSetDeviceName function. The record was published on 2024-01-09.
NVD scores it 9.8 (Critical) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which is network reachable, low complexity, no privileges and no user interaction. The only reference in the record is a third party write up on GitHub. It could not be retrieved when this post was prepared, so the details here come from the NVD record alone.
The record does not state a fixed firmware version, and no vendor advisory is linked. Do not assume a newer build fixes it until the vendor says so. Check the Tenda support and download pages for the A18, and compare the release notes with the description of this CVE.
How to check if you're exposed
Log in to the router's admin page and read the firmware version on the system status or about page. If it reads 15.13.07.09, it matches the record.
Next, find out where the admin interface is reachable from. A home or office router that exposes its admin page only to the local network is far less exposed than one with remote management turned on. Look for a remote management or WAN access setting and note whether it is enabled.
If you manage many sites, add the A18 to your device inventory with its firmware version. Small office routers are often bought one at a time and drift out of any asset list, which is how a critical router flaw stays unpatched for years.
What to do now
- Confirm whether any Tenda A18 devices run firmware 15.13.07.09.
- Turn off remote or WAN side management of the admin interface.
- Check the Tenda support site for a newer A18 firmware and read its release notes before installing.
- Restrict the admin page to a wired management host and change default credentials.
- If the vendor ships no fix, plan to replace the device.
Why it matters
The weakness is an out of bounds write, CWE-787. A stack overflow happens when a program copies input into a fixed size buffer on the stack without checking its length. Writing past the end can overwrite data the program relies on, and on devices with few memory protections that can lead to control of the process.
Home and small office routers run the web server as a privileged process. A memory corruption bug in a form handler there is serious because the device sits on the network edge and sees all traffic that passes through it.
According to the record, the CVE is not in the CISA Known Exploited Vulnerabilities catalog, and no source fetched reports exploitation in the wild.
Quick check
Does this CVE have a confirmed fixed version?
Not in the sources available for this post. The NVD record names only the affected firmware, 15.13.07.09. Check Tenda directly for newer firmware.
What is the quickest risk reduction?
Disable remote management so the admin interface is not reachable from outside, and restrict it to a trusted wired host.
Sources
Last reviewed: 19 October 2026.
