Exploitation Summary
CVE-2020-10987 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including Jaden-Bowers. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed write-up on emulating the Tenda AC15 (V15.03.05.19) firmware's webserver using QEMU and exploiting CVE-2020-10987, a command injection vulnerability in the `/goform/setUsbUnload` handler. It includes steps for filesystem extraction, reverse engineering, and setting up the emulation environment.
Description
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
Exploits (1)
This repository provides a detailed write-up on emulating the Tenda AC15 (V15.03.05.19) firmware's webserver using QEMU and exploiting CVE-2020-10987, a command injection vulnerability in the `/goform/setUsbUnload` handler. It includes steps for filesystem extraction, reverse engineering, and setting up the emulation environment.
Nuclei Templates (1)
http.title:"tenda wifi"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H