VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 21, 2019· Updated Aug 4, 2024

CVE-2019-5072

CVE-2019-5072

Description

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS2 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Tenda/AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Routedescription
  • Tenda/AC9llm-fuzzy
    Range: = 1.0 firmware V15.03.05.16multiTRU

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.