A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.
References
Link | Resource |
---|---|
https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2018-03-20 19:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-5768
Mitre link : CVE-2018-5768
CVE.ORG link : CVE-2018-5768
JSON object : View
Products Affected
tendacn
- ac15
- ac15_firmware
CWE
CWE-798
Use of Hard-coded Credentials