Tenda Command Injection (CVE-2020-15916)

A command injection vulnerability exists in Tenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-15916

The Tenda AC15 AC1900 wireless router (version 15.03.05.19 ) is vulnerable to a command injection flaw in the goform/AdvSetLanip endpoint. This vulnerability allows remote attackers to execute arbitrary system commands by providing shell metacharacters in the lanIp POST parameter. The flaw arises...