Submit #299687: Tenda AC15 V15.03.05.18 command injectioninfo

TitleTenda AC15 V15.03.05.18 command injection
DescriptionThe Tenda AC15 V15.03.05.18 firmware, we discovered a command injection vulnerablility in the usbName parameter in formSetSambaConf function.
Source⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/formSetSambaConf.md
User
 wxhwxhwxh_miemie (UID 65922)
Submission03/16/2024 10:56 (2 years ago)
Moderation03/23/2024 06:46 (7 days later)
StatusAccepted
VulDB entry257775 [Tenda AC15 15.03.05.18/15.03.20_multi /goform/setsambacfg formSetSambaConf usbName os command injection]
Points15

Do you want to use VulDB in your project?

Use the official API to access entries easily!