CVE-2021-44971: Command Injection
First published: Fri Jan 28 2022(Updated: )
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tenda ac15 firmware | =15.03.05.20_multi | |
| Tenda AC15 | =1.0 | |
| Tenda Ac5 Firmware | =15.03.06.48_multi | |
| Tenda AC5 | =1.0 | |
| All of | ||
| Tenda ac15 firmware | =15.03.05.20_multi | |
| Tenda AC15 | =1.0 | |
| All of | ||
| Tenda Ac5 Firmware | =15.03.06.48_multi | |
| Tenda AC5 | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this authentication bypass vulnerability?
The vulnerability ID for this authentication bypass vulnerability is CVE-2021-44971.
Which Tenda devices are affected by this authentication bypass vulnerability?
Multiple Tenda devices, such as AC15V1.0 Firmware V15.03.05.20_multi and AC5V1.0 Firmware V15.03.06.48_multi, are affected by this authentication bypass vulnerability.
What is the severity rating of CVE-2021-44971?
The severity rating of CVE-2021-44971 is critical with a score of 9.8.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability to obtain sensitive information, and even combine it with authenticated command injection to implement Remote Code Execution (RCE).
Is there a fix available for this vulnerability?
Please refer to the references provided for information on available fixes or patches for this vulnerability.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/tenda
- canonical/tenda ac15 firmware
- version/tenda ac15 firmware/15.03.05.20_multi
- canonical/tenda ac15
- version/tenda ac15/1.0
- canonical/tenda ac5 firmware
- version/tenda ac5 firmware/15.03.06.48_multi
- canonical/tenda ac5
- version/tenda ac5/1.0