Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-10988

Description

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.

POC

Reference

- https://www.ise.io/research/

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/cecada/Tenda-AC6-Root-Acces

- https://github.com/stjohn96/ac6-root