CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices

published September 2, 2018

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03620 · 89.5th percentile
Published
2018-09-02T03:00Z
EPSS history
Timeline
  • 02 SEP 03:00Z
    An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices
    cvelistv5