CVE-2021-45986: OS Command Injection
Tenda routers G1 and G3 v15.11.0.17(9502)CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45986?
CVE-2021-45986 has been assigned a medium severity rating due to its potential for exploitation via command injection.
How do I fix CVE-2021-45986?
To fix CVE-2021-45986, update the firmware of Tenda routers G1 and G3 to a version that addresses this vulnerability.
What types of devices are affected by CVE-2021-45986?
CVE-2021-45986 specifically affects Tenda router models G1 and G3 running firmware version 15.11.0.17(9502)_CN.
Can CVE-2021-45986 be exploited remotely?
Yes, CVE-2021-45986 can be exploited remotely if the attacker has access to the vulnerable parameter via network access.
What impact does CVE-2021-45986 have on my network?
CVE-2021-45986 can allow attackers to execute arbitrary commands on the affected Tenda routers, posing a risk to the network's security.