Tenda AC10 Command Execution Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC10 version v15.03.06.26. The vulnerability stems from the application failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

CVE-2023-37144

The CVE-2023-37144 entry affects the Tenda AC10 router (v15.03.06.26). The vulnerability is a command injection in the mac parameter of the function formWriteFacMac. Root cause: input handling that allows arbitrary command execution. Impact: high severity, as reflected by the CVSS 3.1 vector (Net...

Remote code execution

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...