A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.
References
Link | Resource |
---|---|
https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ | Third Party Advisory |
https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 04:09
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ - Third Party Advisory |
Information
Published : 2018-03-20 19:29
Updated : 2024-11-21 04:09
NVD link : CVE-2018-5768
Mitre link : CVE-2018-5768
CVE.ORG link : CVE-2018-5768
JSON object : View
Products Affected
tendacn
- ac15
- ac15_firmware
CWE
CWE-798
Use of Hard-coded Credentials