Description
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tenda AC9
15.03.05.14affected
Tenda AC15
15.03.05.14affected
References
- https://vuldb.com/?id.323876 ↗
- https://vuldb.com/?ctiid.323876 ↗
- https://vuldb.com/?submit.647838 ↗
- https://vuldb.com/?submit.647839 ↗
- https://github.com/2664521593/mycve/blob/main/Tenda/Tenda_AC9_CJ.md ↗
- https://github.com/2664521593/mycve/blob/main/Tenda/Tenda_AC9_CJ.md#poc ↗
- https://www.tenda.com.cn/ ↗