Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenda AC9和AC10 操作系统命令注入漏洞
Vulnerability Description
Tenda AC9是中国腾达（Tenda）公司的一款无线路由器产品。 Tenda AC9 15.03.05.19(6318)_CN版本和AC10 15.03.06.23_CN版本及之前版本中存在操作系统命令注入漏洞，该漏洞源于POST请求中的‘mcc’参数被直接用于doSystemCmd函数调用。远程攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A