critical9.8
CVE-2018-18728
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices.
Impact
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac9 Firmware | Version 15.03.05.19\(6318\)_cn |
| Tenda | Ac15 Firmware | Version 15.03.05.19_cn |
| Tenda | Ac18 Firmware | Version 15.03.05.19\(6318\)_cn |