CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-10-30
Tenda AC7 / AC9 / AC10 Routers goform/setUsbUnload Remote Command Injection Vulnerability (CVE-2018-14558) Analysis and Mitigation Guide
[Affected Scope] Tenda AC7 (firmware through V15.03.06.44_CN), AC9 (firmware through V15.03.05.19(6318)_CN), and AC10 (firmware through V15.03.06.23_CN)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise
[Mitigation] Apply the latest official firmware updates immediately, disable WAN-side remote management, and restrict access to the web interface