PT-2018-1179 · Tenda · Tenda Ac15

Published 2018-01-14 · Updated 2019-10-03 · CVE-2018-5770

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda AC15 (affected versions not specified)

Description The issue is related to insufficient access control in the Tenda AC15 router's firmware. It allows a remote attacker to gain root access to the device by initiating a special request to the /goform/telnet API endpoint, which starts the telnetd service. Several default accounts on the device have root privileges, enabling an attacker to log in.

Recommendations For Tenda AC15 devices, consider disabling the /goform/telnet API endpoint until a patch is available to prevent exploitation. Restrict access to the telnetd service to minimize the risk of unauthorized root access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1188

CWE-264

Related Identifiers

BDU:2018-00634

CVE-2018-5770

Affected Products

Tenda Ac15

References · 3

• 🔥 https://fidusinfosec.com/tenda-ac15-unauthenticated-telnetd-start-cve-2018-5770 · Exploit
• https://bdu.fstec.ru/vul/2018-00634 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-5770 · Security Note