Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-15916

Description

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.

POC

Reference

No PoCs from references.

Github

- https://github.com/geniuszly/CVE-2020-15916

- https://github.com/geniuszlyy/CVE-2020-15916