Critical · published October 30, 2018
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 95.0th percentile for exploit probability.
🚨 Tenda AC7, AC9, and AC10 routers are harboring a nasty secret: a command injection vulnerability that lets attackers execute arbitrary OS commands through a sneaky HTTP request! 🔥 This vulnerability is like a hotel front desk that blindly follows any guest's request to unlock any room, leaving every door wide open for mischief. All it takes is one well-crafted request, and an attacker could waltz right in! An attacker can take complete control of the affected devices, executing any command they desire. Imagine an intruder changing your Wi-Fi password, snooping on network traffic, or even worse, launching attacks on your entire network. The potential for chaos is absolutely devastating!
This vulnerability is like a hotel front desk that blindly follows any guest's request to unlock any room, leaving every door wide open for mischief. All it takes is one well-crafted request, and an attacker could waltz right in! This command injection vulnerability arises from the 'formsetUsbUnload' function, which carelessly executes the dosystemCmd function using untrusted input from a crafted goform/setUsbUnload request. Essentially, if an attacker knows how to craft their request, they can run commands on the operating system directly.
An attacker can take complete control of the affected devices, executing any command they desire. Imagine an intruder changing your Wi-Fi password, snooping on network traffic, or even worse, launching attacks on your entire network. The potential for chaos is absolutely devastating! Patch your Tenda devices immediately to the latest firmware versions: V15.03.06.44_CN for AC7, V15.03.05.19(6318)_CN for AC9, and V15.03.06.23_CN for AC10. Also, consider implementing network segmentation and disabling remote management features to tighten security until the vulnerabilities are fully resolved. You can tackle this! Stay proactive and secure your devices – you've got this! 🛡️