The vulnerability of the doSystemCmd (goform/formSetUSBPartitionUmount) function in the Tenda W20E router software allows a hacker to execute arbitrary commands.

The vulnerability of the doSystemCmd goform/formSetUSBPartitionUmount function in the Tenda W20E router microprogramming system is related to incorrect handling of code generation in memory when processing the usbPartitionName parameter. Exploiting this vulnerability allows an attacker to execute...