Buffer overflow

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a pos...

CVE-2018-18729

Affected devices are Tenda routers AC7 (V15.03.06.44_CN), AC9 (V15.03.05.19(6318)_CN), AC10 (V15.03.06.23_CN), AC15 (V15.03.05.19_CN), and AC18 (V15.03.05.19(6318)_CN). The issue is a heap-based buffer overflow in the router web server (httpd). During processing of the mac parameter for a POST re...

CVE-2018-18728

The CVE-2018-18728 vulnerability affects Tenda AC9 (V15.03.05.19_CN), AC15 (V15.03.05.19_CN) and AC18 (V15.03.05.19_CN) devices. A remote code execution condition exists via shell metacharacters entered in the usbName field, targeting the __fastcall function through a POST request. The issue is d...

CVE-2018-18706

CVE-2018-18706 affects Tenda AC7/AC9/AC10/AC15/AC18 routers. The vulnerability exists in the router’s web server (httpd) where, on processing the page parameter of the function fromDhcpListClient , the value is directly used in a sprintf into a stack-based local variable, overriding the function’...

The vulnerability of the Tenda AC15 router’s microprogramming software allows a hacker to gain access to the device with root privileges.

The vulnerability of the Tenda AC15 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges by running the telnetd daemon using a special...

Router vulnerability analysis the fifth bomb: CVE-2018-5767 router remote code execution-vulnerability warning-the black bar safety net

Vulnerability overview CVE-2018-5767 TENDA AC15 router right remote code execution Reference information: https://www.fidusinfosec.com/remote-code-execution-cve-2018-5767/ Vulnerability firmware version: Tenda cn Ac15firmware:15.03.1.16 2. The vulnerability analysis. Vulnerabilities file is...

Tenda AC15 Router Remote Code Execution Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A remote code execution vulnerability exists on the Tenda AC15 V15.03.1.16multi device, which can be exploited by an unauthenticated, remote attacker to perform remote code execution on the device using the COOKIE password...

Tenda AC15 Router Code Execution Vulnerability

Tenda AC15 router is a wireless router product from Tenda, China. A security vulnerability exists in the Tenda AC15 router. The vulnerability can be exploited by a remote attacker to execute code with the help of a specially crafted 'COOKIE' parameter...

Tenda AC15 Authentication Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A security vulnerability exists in the Tenda AC15, which originates from some default accounts on the device having root privileges. The vulnerability can be exploited by a remote attacker to create a telnetd service by sendin...

CVE-2018-5768

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

Remote code execution

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

CVE-2018-5768

CVE-2018-5768 affects the Tenda AC15 router. The vulnerability allows remote, unauthenticated code execution via a specially crafted COOKIE header/password parameter, enabling an attacker to run arbitrary code on the device. Connected sources also indicate related exploit paths such as starting a...

CVE-2018-5768

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

Design/Logic Flaw

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to...

CVE-2018-5770

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to...

CVE-2018-5770

The CVE-2018-5770 entry concerns Tenda AC15 routers. A remote, unauthenticated attacker can trigger the creation of a telnetd service by sending a request to /goform/telnet. Although the service is password protected, several default root accounts exist on the device that can be used to log in, l...

CVE-2018-5770

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to...

UNAUTHENTICATED START OF TELNETD ON TENDA AC15 ROUTER

INTRODUCTION We previously showed how the Tenda AC15 router was vulnerable to an unauthenticated remote code execution vulnerability via a stack based buffer overflow. Writing exploits like that can be incredibly interesting, but sometimes, all you need is a GET request to get root. In this post ...

CVE-2018-5767

An issue was discovered on Tenda AC15 V15.03.1.16multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header...

Remote code execution

An issue was discovered on Tenda AC15 V15.03.1.16multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header...