CVE-2024-2851 Tenda AC15 setsambacfg formSetSambaConf os command injection

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to initiate the attack remotely...

Tenda AC15 操作系统命令注入漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a command injection...

Tenda AC18 操作系统命令注入漏洞

Tenda AC18 is a router from Tenda, China. An OS command injection vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from an OS command injection in the usbName parameter of the formSetSambaConf method on the /goform/setsambacfg page...

CVE-2018-18728

An issue was discovered on Tenda AC9 V15.03.05.196318CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. They allow remote code execution via shell metacharacters in the usbName field to the fastcall function with a POST request...

Tenda AC9, AC15 and AC18 Code Execution Vulnerabilities

The Tenda AC9, AC15 and AC18 are all wireless router products from Tenda, a Chinese company. A code execution vulnerability exists in the Tenda AC9, AC15, and AC18, which can be exploited by a remote attacker to execute code via shell metacharacters in the usbName field...

CVE-2018-18728

An issue was discovered on Tenda AC9 V15.03.05.196318CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. They allow remote code execution via shell metacharacters in the usbName field to the fastcall function with a POST request...