Tenda AC15 Router Remote Code Execution Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A remote code execution vulnerability exists on the Tenda AC15 V15.03.1.16multi device, which can be exploited by an unauthenticated, remote attacker to perform remote code execution on the device using the COOKIE password...

CVE-2018-5767

CVE-2018-5767 affects Tenda AC15 V15.03.1.16_multi: an unauthenticated attacker can trigger remote code execution via a crafted Cookie header password parameter in the device’s HTTPD (R7WebsSecurityHandler) due to a fixed-size stack buffer overflow. Public writeups and exploits describe crafting ...