| tiêu đề | Tenda Tenda F453 Router <= V1.0.0.3 Remote Command Execution |
|---|
| Mô tả | A remote command execution vulnerability exists in the Tenda F453 router (firmware version V1.0.0.3). An attacker can activate the device’s Telnet service through a specific HTTP endpoint. The vulnerability is located in the TendaTelnet function, which directly executes system commands to enable the Telnet service but lacks proper access control and security validation. As a result, an attacker can send a crafted request to enable Telnet and then obtain interactive shell access to the router, ultimately achieving arbitrary command execution. |
|---|
| Nguồn | ⚠️ https://github.com/alc9700jmo/CVE/issues/24 |
|---|
| Người dùng | alc9700 (UID 79368) |
|---|
| Đệ trình | 03/04/2026 18:14 (cách đây 6 các tháng) |
|---|
| Kiểm duyệt | 24/04/2026 21:25 (21 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 359541 [Tenda F453 đến 1.0.0.3 Telnet Service /goform/telnet TendaTelnet nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|