提交 #478175: Tenda AC10v4.0 v16.03.10.20 Command Injection

An issue in the handler function in /goform/telnet of Tenda AC10v4.0 V16.03.10.20 allows attackers to execute arbitrary commands via a crafted HTTP request.

• 来源: ⚠️ https://github.com/Pr0b1em/IoT/blob/master/TendaAC10v16.03.10.20telnet.md
• 用户: Pr0b1em (UID 77875)
• 提交: 2025-01-09 17時38分 (2 年前)
• 管理: 2025-01-17 07時28分 (8 days later)
• 状态: 已接受
• VulDB条目: 292412 [Tenda AC8/AC10/AC18 16.03.10.20 HTTP Request /goform/telnet 权限提升]
• 积分: 15