CVE-2021-45401

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...

Command injection

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...

CVE-2021-45401

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...

CVE-2021-45401

CVE-2021-45401 describes a command-injection vulnerability in the Tenda AC10U AC1200 router (AC10U V1.0 firmware V15.03.06.49_multi) exploited via the setUsbUnload path. The client-supplied deviceName is passed directly to the doSystemCmd function, enabling arbitrary command execution. Documents ...

PT-2022-12342

Name of the Vulnerable Software and Affected Versions Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49 multi Description A Command injection issue exists via the setUsbUnload functionality. The issue is caused because the client-controlled deviceName value is...

Tenda AC10 安全漏洞

The Tenda AC10U is a router designed with Gigabit ports on both WAN and LAN ports.A command injection vulnerability exists in the Tenda AC10U, which stems from the deviceName value of the client control being passed directly to the doSystemCmd function. An attacker could use this vulnerability to...

CVE-2021-45401: Improper Neutralization of Special Elements used in a Command

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function...