The vulnerability of the formSetSambaConf() function (/goform/setsambacfg) in the Tenda AC10U router software allows a attacker to execute arbitrary commands.

The vulnerability of the formSetSambaConf function /goform/setsambacfg of the Tenda AC10U router software is related to the failure to take measures to neutralize special elements used in the OS command when processing the usbName parameter. Exploiting this vulnerability allows a remote attacker ...