| शीर्षक | Tenda AC10 Tenda AC10 V1.0 Router V15.03.06.23_multi_TD01 Command Injection |
|---|
| विवरण | Tenda AC10 V1.0 Router is a consumer-grade wireless router supporting advanced wireless features, firewall, and device management capabilities. A command injection vulnerability exists in the formWriteFacMac function, which handles requests to the /goform/WriteFacMac endpoint. Attackers can inject arbitrary system commands via the mac parameter, leading to unauthorized device control or complete compromise.
The formWriteFacMac function processes POST requests to /goform/WriteFacMac. It extracts the user-controlled mac parameter using websGetVar and passes it directly to doSystemCmd without sanitization. In doSystemCmd, the parameter is interpolated into a system command (e.g., cfm mac %s) and executed directly on the system. By injecting special characters (e.g., ;), attackers can escape the command context and execute arbitrary system commands on the router.
|
|---|
| स्रोत | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Tenda%20AC10/WriteFacMac |
|---|
| उपयोगकर्ता | n0ps1ed (UID 88889) |
|---|
| सबमिशन | 11/08/2025 08:19 AM (1 वर्ष पहले) |
|---|
| संयम | 13/08/2025 01:56 PM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 233299 [Tenda AC10 15.03.06.26 formWriteFacMac mac अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|