Tenda AC15 AC1900多个安全漏洞 CVE-2020–10986 CVE-2020–10989 CVE-2020–10988 CVE-2020–10987 CVE-2020–15916

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

# Tenda AC15 AC1900 Vulnerabilities Discovered and Exploited ## Demonstrating how remote attackers can gain control of the Tenda AC15 AC1900. ![](https://images.seebug.org/1601445926849-w331s) <center>Tenda AC15 AC1900</center> As part of ISE Labs’ research into embedded devices, we looked at Tenda’s AC15 AC1900 Smart Dual-band Gigabit Wi-Fi Router. During our research efforts, we tested the router running its then-latest firmware version 15.03.05.19. While they have recently removed this version from official circulation, we would like to mention that Tenda has not updated their firmware since 2017. However, the 2019 firmware version is still available to download from Tenda’s US website. Our research efforts uncovered 5 CVEs with concerning ramifications for the firmware running on the Tenda AC15 AC1900. Interesting stuff right? Continue reading as we will demonstrate two methods attackers can use to gain persistent unauthenticated root access to the device. It is worth...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息