CVE-2020-10987

🗓️ 13 Jul 2020 18:46:12Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1124 Views🌐 WEB

The Tenda AC15 AC1900 version 15.03.05.19 is vulnerable to remote code execution

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for OS Command Injection in Tenda Ac15_Firmware	23 Oct 202515:30	–	githubexploit
ATTACKERKB	CVE-2020-10987	13 Jul 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the Tenda AC15 AC1900 router’s microprogramming software lies in the insufficient neutralization of special elements transmitted in URIs, allowing a hacker to execute arbitrary commands on the target system.	22 Oct 202000:00	–	bdu_fstec
Circl	CVE-2020-10987	5 Oct 202009:50	–	circl
CISA KEV Catalog	Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability	3 Nov 202100:00	–	cisa_kev
CNVD	Tenda AC15 AC1900 Remote Code Execution Vulnerability	14 Jul 202000:00	–	cnvd
Check Point Advisories	Tenda Routers Command Injection (CVE-2020-10987; CVE-2018-14558)	14 Oct 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-10987	13 Jul 202018:46	–	cvelist
Microsoft Malware Protection	Microsoft research uncovers new Zerobot capabilities	21 Dec 202220:00	–	mmpc
Microsoft Secure	Microsoft research uncovers new Zerobot capabilities	21 Dec 202220:00	–	mssecure

NVD

Node

AND

Source	Link
blog	www.blog.securityevaluators.com/tenda-ac1900-vulnerabilities-discovered-and-exploited-e8e26aa0bc68
ise	www.ise.io/research/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
deviceName	request body	goform/setUsbUnload	Remote command execution via POST parameter deviceName in goform/setUsbUnload on Tenda AC15/AC1900 (CVE-2020-10987).	CWE-78

17 Jun 2026 02:48Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

EPSS0.79673

SSVC