Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenda AC7、AC9和AC10 命令注入漏洞
Vulnerability Description
Tenda AC7、AC9和AC10都是中国腾达（Tenda）公司的无线路由器产品。 Tenda AC7、AC9和AC10中存在命令注入漏洞。攻击者可通过发送特制的请求利用该漏洞执行任意操作系统命令。以下产品和版本受到影响：Tenda AC7（使用15.03.06.44_CN及之前版本固件）；AC9（使用15.03.05.19(6318)_CN及之前版本固件）；AC10（使用15.03.06.23_CN及之前版本固件）。
CVSS Information
N/A
Vulnerability Type
N/A