← back
CVE-2018-5767

CVE-2018-5767

EPSS 41.4%
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.
Affected products
n/a · n/a
public PoCs found — 4
githubgithub.com/db44k/CVE-2018-5767-AC9★ 0githubgithub.com/Scorpion-Security-Labs/CVE-2018-5767-AC9★ 0cve_referencewww.exploit-db.com/exploits/44253/unverifiedexploitdbwww.exploit-db.com/exploits/44253unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/44253/https://www.fidusinfosec.com/remote-code-execution-cve-2018-5767/