CVE DatabaseCVE-2020-10987

Updated 2026-06-17한국어 권고문 →

CVE-2020-109879.8/CRITICALCISA KEVCWE-78CWE-78

CVE-2020-10987 Technical Vulnerability Analysis & Patch Advisory (CVSS 9.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

enterprise-software

Published Date

2020-07-13

CVSS v3.1

9.8

CRITICAL

EPSS (30d)

79.8%

FIRST.org

CISA KEV

Exploited

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Affected Scope

Systems running unpatched versions impacted by CVE-2020-10987

Impact

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via t...

Mitigation

Apply vendor security patches and restrict external network exposure.

Affected Products & Version Scope

All unpatched versions listed in the official NVD CPE configurations

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Remediation Steps

Upgrade to the latest patched release from the vendor.
Apply virtual patching or network segmentation until maintenance windows allow full patching.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Reduce your attack surface immediately with automated vulnerability scanning and runtime protection.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Technical Overview

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

CVSS Score: 9.8 (CRITICAL)
CWE IDs: CWE-78, CWE-78

Official Vendor Advisories & References

NVD Original English Description

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

https://blog.securityevaluators.com/tenda-ac1900-vulnerabilities-discovered-and-exploited-e8e26aa0bc68

Source: cve@mitre.org · Exploit, Third Party Advisory

https://www.ise.io/research/

Source: cve@mitre.org · Third Party Advisory

https://blog.securityevaluators.com/tenda-ac1900-vulnerabilities-discovered-and-exploited-e8e26aa0bc68

Source: af854a3a-2127-422b-91ae-364da2661108 · Exploit, Third Party Advisory

https://www.ise.io/research/

Source: af854a3a-2127-422b-91ae-364da2661108 · Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10987

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 · US Government Resource

Frequently Asked SecOps Questions (CVE-2020-10987)

FAQ

Q1. How critical is CVE-2020-10987 and is it actively exploited in the wild?

CVE-2020-10987 is rated CVSS 9.8 (CRITICAL) with a 30-day EPSS exploitation probability of 79.8%. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, requiring immediate emergency remediation.

Q2. Which vendors and products are affected by CVE-2020-10987?

Primary impacted vendors include security-advisory across enterprise-software. Scope summary: All unpatched versions listed in the official NVD CPE configurations

Q3. What temporary mitigations or workarounds exist for CVE-2020-10987 before patching?

[Mitigation] Apply vendor security patches and restrict external network exposure. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION

Generate an Internal Engineering Notice or CISO Report for CVE-2020-10987

Instantly format this advisory into an executive CISO summary or engineering patch ticket.

Generate Report →

🔗 Related Advisories in Similar Stack (security-advisory)

View Category →

CVE-2026-1201147.2/HIGH

EPSS 0.4%

CVE-2026-120114 Technical Vulnerability Analysis & Patch Advisory (CVSS 7.2)

[Affected Scope] Systems running unpatched versions impacted by CVE-2026-120114

CVE-2026-422718.8/HIGHCISA KEV

EPSS 91.4%

LiteLLM Proxy Server MCP Test Endpoints Remote Code Execution Vulnerability Advisory (CVE-2026-42271)

[Affected Scope] LiteLLM proxy server environments running versions 1.74.2 to before 1.83.7

CVE-2026-10513410.0/CRITICALCISA KEV

EPSS 81.8%

Ahsay AhsayCBS Replication Receiver Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-105134)

[Affected Scope] AhsayCBS versions up to 9.15.2.69 and 10.3.4.44, specifically the Replication Receiver component

CVE-2026-1104479.8/CRITICALCISA KEV

EPSS 73.3%

Critical RCE in Nextcloud Collabora Online Built-in CODE Server (CVE-2026-110447)

[Affected Scope] Collabora Online Built-in CODE Server (richdocumentscode) for Nextcloud before version 26.4.303.

SecOps Advisory Dispatch & RSS Feed

Subscribe to Daily Vulnerability Briefings & KEV Alerts

Concise morning briefings for SecOps, DevSecOps, and SRE teams covering newly exploited CVEs and mitigation priorities.

Slack / Teams / RSS Feed:

PatchKO