CVE-2018-5768

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tendacn:ac15_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tendacn:ac15:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:09

Type Values Removed Values Added
References () https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ - Third Party Advisory () https://www.fidusinfosec.com/tenda-ac15-hard-coded-accounts-cve-2018-5768/ - Third Party Advisory

Information

Published : 2018-03-20 19:29

Updated : 2024-11-21 04:09


NVD link : CVE-2018-5768

Mitre link : CVE-2018-5768

CVE.ORG link : CVE-2018-5768


JSON object : View

Products Affected

tendacn

  • ac15
  • ac15_firmware
CWE
CWE-798

Use of Hard-coded Credentials