CVE-2023-31587

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac

Critical · published May 16, 2023

CVSS v3.1
9.8
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

🚨 A single rogue request can turn your home network into a playground for attackers! 🔥 Think of your router as a family safe, and this vulnerability is like an intruder knowing the secret combo to access your valuables inside. No one wants that! An attacker exploiting this flaw could remotely execute code on your Tenda AC5 router, giving them control over your device. They could snoop on your traffic, manipulate settings, or even hijack your entire network—yikes!

Put simply

Think of your router as a family safe, and this vulnerability is like an intruder knowing the secret combo to access your valuables inside. No one wants that! This remote code execution (RCE) vulnerability is triggered by a malicious Mac parameter sent to ip/goform/WriteFacMac, allowing unauthorized command execution on the device.

What to do

An attacker exploiting this flaw could remotely execute code on your Tenda AC5 router, giving them control over your device. They could snoop on your traffic, manipulate settings, or even hijack your entire network—yikes! Immediately patch your Tenda AC5 router to the latest firmware version that resolves this issue. If the patch isn't available yet, consider isolating the device from critical networks until updates are live. Regularly check for updates and secure your router settings! You’ve got this! Follow these steps, and you’ll have your network locked down in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01998 · 80.6th percentile
Published
2023-05-16T00:00Z
EPSS history
Timeline
  • 16 MAY 00:00Z
    Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac
    cvelistv5