Platform
tenda
Component
tenda_ac8_v5
A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function routesetuserpolicyrule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Exploit Status
EPSS
0.38% (59% percentile)
CISA SSVC
CVSS Vector
Actualice el firmware del router Tenda AC8 a una versión posterior a 16.03.50.11 para mitigar la vulnerabilidad de inyección de comandos. Consulte el sitio web del fabricante para obtener la última versión del firmware y las instrucciones de actualización.
Vulnerability analysis and critical alerts directly to your inbox.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.