Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-15693
HistoryJun 20, 2022 - 12:00 a.m.

Tenda AC18 Remote Code Execution Vulnerability (CNVD-2023-15693)

2022-06-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
tenda ac18
remote code execution
vulnerability
cnvd-2023-15693
filter failure
arbitrary code execution

EPSS

0.038

Percentile

92.0%

A remote code execution vulnerability exists in Tenda AC18 V15.03.05.19 and V15.03.05.05, which stems from the failure of the Mac parameter of ip/goform/WriteFacMac to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to cause arbitrary code execution.

EPSS

0.038

Percentile

92.0%