CVE-2018-14558—Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

漏洞名称

Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

描述

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2018-14558

相关新闻文章

• Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS BotnetJanuary 22, 2025

相关 CWE

• CWE-78