CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
First published: Mon Jul 13 2020(Updated: )
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tenda ac15 firmware | =15.03.05.19 | |
| Tenda AC15 | ||
| Tenda AC1900 Router AC15 Model | ||
| All of | ||
| Tenda ac15 firmware | =15.03.05.19 | |
| Tenda AC15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Tenda AC1900 Router AC15 Model Remote Code Execution vulnerability?
The vulnerability ID for the Tenda AC1900 Router AC15 Model Remote Code Execution vulnerability is CVE-2020-10987.
What is the severity of CVE-2020-10987?
The severity of CVE-2020-10987 is critical with a severity value of 9.8.
How does the Tenda AC1900 Router AC15 Model Remote Code Execution vulnerability allow attackers to execute arbitrary system commands?
The Tenda AC1900 Router AC15 Model Remote Code Execution vulnerability allows remote attackers to execute arbitrary system commands via the deviceName POST parameter in the goform/setUsbUnload endpoint.
What software versions are affected by CVE-2020-10987?
CVE-2020-10987 affects Tenda AC15 AC1900 version 15.03.05.19.
Is the Tenda AC15 router vulnerable to CVE-2020-10987?
No, the Tenda AC15 router is not vulnerable to CVE-2020-10987.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/severity
- agent/title
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/tenda
- canonical/tenda ac15 firmware
- version/tenda ac15 firmware/15.03.05.19
- canonical/tenda ac15
- canonical/tenda ac1900 router ac15 model