Lucene search
China National Vulnerability DatabaseCNVD-2023-40600HistoryMay 18, 2023 - 12:00 a.m.
Tenda AC5 Code Execution Vulnerability
2023-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
tenda
wireless router
code execution
vulnerability
chinese company
mac parameter
ip/goform/writefacmac
arbitrary code execution
cnvd
0.014 Low
EPSS
Percentile
86.5%
Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this vulnerability to cause arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tenda ac5 v15. | eq | 03.06.28 |
Related
prion
prion
Remote code execution
2023-05-16 15:15:00
cve
cve
CVE-2023-31587
2023-05-16 15:15:09
cvelist
cvelist
CVE-2023-31587
2023-05-16 00:00:00
nvd
nvd
CVE-2023-31587
2023-05-16 15:15:09