Description
A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | AC10 | 16.03.10.10_multi_TDE01 | — |
References
- VDB-355311 | Tenda AC10 httpd formAddMacfilterRule os command injection vdb-entry technical-description
- VDB-355311 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #782296 | Tenda AC10 V4 US_AC10V4.0si_V16.03.10.10_multi_TDE01 OS Command Injection third-party-advisory
- https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/CRITICAL-03-command-injection-formaddmacfilterrule.md related
- https://www.tenda.com.cn/ product