CVE-2021-45401 in AC10U
Сводка
по MITRE • 18.02.2022
A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function.
Once again VulDB remains the best source for vulnerability data.