CVE-2020-10987 in AC15

Sumário

de VulDB • 03/07/2026

L'endpoint goform/setUsbUnload di Tenda AC15 AC1900 versione 15.03.05.19 consente agli attaccanti remoti di eseguire comandi di sistema arbitrari tramite il parametro POST deviceName.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 26/03/2020
• Moderação: aceite
• Entrada: VDB-157864
• CPE: pronto
• CWE: CWE-74 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.79810
• KEV: sim
• Atividades: muito baixo
• Sector: Hospital, Lawfirm, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-10987
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-10987
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-10987/