CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

CVE-2018-16334

CVE-2018-16334 affects Tenda AC9 (V15.03.05.19(6318)_CN) and AC10 (V15.03.06.23_CN). The vulnerability arises when the mac parameter in a POST request is directly used in a doSystemCmd call, causing an OS command injection. Impact is indicated as high with network attack vector, requiring low pri...