Remote Code Execution Vulnerability in Tenda AC15 Router via Specially Crafted COOKIE Header

Remote Code Execution Vulnerability in Tenda AC15 Router via Specially Crafted COOKIE Header

CVE-2018-5768 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.

Learn more about our Web Application Penetration Testing UK.