Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| AC1900 Router AC15 Model | Versions not published yet (product named by CISA KEV) | |
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free