The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of…
The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdump command and executed with root privileges. This vulnerability can be exploited without authentication if the device is in a factory-reset state.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Tenda
- Product
- W18E
- Exposure class
- Network management
- NVD status
- Received
Why it ranks 5 (Routine)
- Product class: network management
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.