PT-2018-1179 · Tenda · Tenda Ac15
Publicado
2018-01-14
·
Atualizado
2019-10-03
·
CVE-2018-5770
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda AC15 (affected versions not specified)
Description
The issue is related to insufficient access control in the Tenda AC15 router's firmware. It allows a remote attacker to gain root access to the device by initiating a special request to the
/goform/telnet API endpoint, which starts the telnetd service. Several default accounts on the device have root privileges, enabling an attacker to log in.Recommendations
For Tenda AC15 devices, consider disabling the
/goform/telnet API endpoint until a patch is available to prevent exploitation.
Restrict access to the telnetd service to minimize the risk of unauthorized root access.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Tenda Ac15