Unrated severityNVD Advisory· Published Feb 11, 2022· Updated Aug 4, 2024

CVE-2020-26728

Description

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the guestuser field to the __fastcall function with a POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/AC9cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = V15.03.06.42_multi, = V15.03.05.19(6318)_CN

Patches

Vulnerability mechanics

References

github.com/Lyc-heng/Router/blob/main/Tenda/rce1.mdmitrex_refsource_MISC
github.com/Lyc-heng/routers/blob/a80b30bccfc9b76f3a4868ff28ad5ce2e0fca180/routers/rce1.mdmitrex_refsource_MISC
github.com/Lyc-heng/routers/blob/main/routers/rce1.mdmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000