NetSight
critical9.8Public exploit code

CVE-2018-5767

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.

Affected products

VendorProductAffected versions
TendacnAc15 Firmware
Version 15.03.1.16

Weakness classification

References