Tenda AC15/AC1900 15.03.05.19 goform/setUsbUnload deviceName injection

Summaryinfo

A vulnerability classified as critical was found in Tenda AC15 and AC1900 15.03.05.19. This vulnerability affects unknown code of the file goform/setUsbUnload. Executing a manipulation of the argument deviceName as part of POST Parameter can lead to injection. The identification of this vulnerability is CVE-2020-10987. The attack may be launched remotely. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability has been found in Tenda AC15 and AC1900 15.03.05.19 and classified as critical. This vulnerability affects an unknown function of the file goform/setUsbUnload. The manipulation of the argument deviceName as part of a POST Parameter leads to a injection vulnerability. The CWE definition for the vulnerability is CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

The weakness was shared 07/13/2020. This vulnerability was named CVE-2020-10987 since 03/26/2020. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details and also a exploit are known. The MITRE ATT&CK project declares the attack technique as T1055.

It is declared as attacked. This issue was added on 11/03/2021 to the CISA Known Exploited Vulnerabilities Catalog with a due date of 05/03/2022:

Apply updates per vendor instructions.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-157866, VDB-157865 and VDB-157863 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Tenda

Name

• AC15
• AC1900

Version

• 15.03.05.19

License

• commercial

Website

• Vendor: https://www.tenda.com.cn/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Duplicate

• Submit #XXXXXX: Xxxxxx Xxxxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxxx (by RCEraser)
• Submit #XXXXXX: Xxxxx Xxxx Xx.x Xxx.xx.xx_xxxxx Xxxxxxx Xxxxxxxxx (by yhryhryhr_miemie)
• Submit #XXXXXX: Xxxxx Xxxx Xxx.xx.xx.xx Xxxxxxx Xxxxxxxxx (by wxhwxhwxh_miemie)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion