CVE-2020-15916: OS Command Injection
Published Jul 23, 2020
·Updated
goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.
Affected Software
2 affected components
Tenda ac15 firmware=15.03.05.19
Tenda Ac15
Event History
Jul 23, 2020
CVE Published
via MITRE·05:53 PM
Data Sourced
via MITRE·05:53 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-15916.
2
What is the severity of CVE-2020-15916?
The severity of CVE-2020-15916 is critical with a CVSS score of 9.8.
3
How does CVE-2020-15916 affect Tenda AC15 AC1900 15.03.05.19 devices?
CVE-2020-15916 allows remote attackers to execute arbitrary system commands on Tenda AC15 AC1900 15.03.05.19 devices via shell metacharacters in the lanIp POST parameter.
4
What is the affected software for CVE-2020-15916?
The affected software for CVE-2020-15916 is Tenda AC15 AC1900 15.03.05.19 firmware.
5
Is Tenda AC15 AC1900 15.03.05.19 firmware vulnerable to CVE-2020-15916?
Yes, Tenda AC15 AC1900 15.03.05.19 firmware is vulnerable to CVE-2020-15916.