Sign-up

ID

VAR-201810-0977


CVE

CVE-2018-14558


TITLE

plural Tenda Command injection vulnerability in product firmware

Trust: 0.8

sources: JVNDB: JVNDB-2018-013995

DESCRIPTION

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Tenda AC7 , AC9 ,and AC10 The firmware contains a command injection vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Tenda AC7, AC9 and AC10 are all wireless router products from China Tenda. Tenda AC7, AC9 and AC10 have command injection vulnerabilities. The following products and versions are affected: Tenda AC7 (using firmware 15.03.06.44_CN and earlier); AC9 (using firmware 15.03.05.19(6318)_CN and earlier); AC10 (using firmware 15.03.06.23_CN and earlier)

Trust: 2.34

sources: NVD: CVE-2018-14558 // JVNDB: JVNDB-2018-013995 // CNVD: CNVD-2020-35174 // VULHUB: VHN-124729 // VULMON: CVE-2018-14558

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-35174

AFFECTED PRODUCTS

vendor:tendamodel:ac10scope:lteversion:15.03.06.23_cn

Trust: 1.8

vendor:tendamodel:ac7scope:lteversion:15.03.06.44_cn

Trust: 1.8

vendor:tendamodel:ac9scope:lteversion:15.03.05.19\(6318\)_cn

Trust: 1.0

vendor:tendamodel:ac9scope:lteversion:15.03.05.19(6318)_cn

Trust: 0.8

vendor:tendamodel:ac7 <=15.03.06.44 cnscope: - version: -

Trust: 0.6

vendor:tendamodel:ac10 <=15.03.06.23 cnscope: - version: -

Trust: 0.6

vendor:tendamodel:ac9 <=15.03.05.19 cnscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-35174 // JVNDB: JVNDB-2018-013995 // NVD: CVE-2018-14558

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-14558
value: CRITICAL

Trust: 1.0

NVD: CVE-2018-14558
value: CRITICAL

Trust: 0.8

CNVD: CNVD-2020-35174
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201810-1439
value: CRITICAL

Trust: 0.6

VULHUB: VHN-124729
value: HIGH

Trust: 0.1

VULMON: CVE-2018-14558
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-14558
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2020-35174
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-124729
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-14558
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2020-35174 // VULHUB: VHN-124729 // VULMON: CVE-2018-14558 // JVNDB: JVNDB-2018-013995 // CNNVD: CNNVD-201810-1439 // NVD: CVE-2018-14558

PROBLEMTYPE DATA

problemtype:CWE-78

Trust: 1.1

problemtype:CWE-77

Trust: 0.9

sources: VULHUB: VHN-124729 // JVNDB: JVNDB-2018-013995 // NVD: CVE-2018-14558

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201810-1439

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201810-1439

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-013995

PATCH
title:Top Pageurl:https://www.tenda.com.cn/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2018-013995

EXTERNAL IDS
db:NVDid:CVE-2018-14558
Trust: 3.2
db:JVNDBid:JVNDB-2018-013995
Trust: 0.8
db:CNNVDid:CNNVD-201810-1439
Trust: 0.7
db:CNVDid:CNVD-2020-35174
Trust: 0.6
db:VULHUBid:VHN-124729
Trust: 0.1
db:VULMONid:CVE-2018-14558
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2020-35174 // 
            
            
            
            VULHUB: VHN-124729 // 
            
            
            
            VULMON: CVE-2018-14558 // 
            
            
            
            JVNDB: JVNDB-2018-013995 // 
            
            
            
            CNNVD: CNNVD-201810-1439 // 
            
            
            
            NVD: CVE-2018-14558

REFERENCES
url:https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-01/tenda.md
Trust: 2.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-14558
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-14558
Trust: 0.8
url:http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-14558
Trust: 0.6
url:https://cwe.mitre.org/data/definitions/78.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2020-35174 // 
            
            
            
            VULHUB: VHN-124729 // 
            
            
            
            VULMON: CVE-2018-14558 // 
            
            
            
            JVNDB: JVNDB-2018-013995 // 
            
            
            
            CNNVD: CNNVD-201810-1439 // 
            
            
            
            NVD: CVE-2018-14558

SOURCES
db:CNVDid:CNVD-2020-35174
db:VULHUBid:VHN-124729
db:VULMONid:CVE-2018-14558
db:JVNDBid:JVNDB-2018-013995
db:CNNVDid:CNNVD-201810-1439
db:NVDid:CVE-2018-14558

LAST UPDATE DATE
2024-11-23T22:41:39.731000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2020-35174date:2020-06-30T00:00:00
db:VULHUBid:VHN-124729date:2019-10-03T00:00:00
db:VULMONid:CVE-2018-14558date:2019-10-03T00:00:00
db:JVNDBid:JVNDB-2018-013995date:2019-03-07T00:00:00
db:CNNVDid:CNNVD-201810-1439date:2019-10-23T00:00:00
db:NVDid:CVE-2018-14558date:2024-11-21T03:49:18.470

SOURCES RELEASE DATE
db:CNVDid:CNVD-2020-35174date:2020-06-30T00:00:00
db:VULHUBid:VHN-124729date:2018-10-30T00:00:00
db:VULMONid:CVE-2018-14558date:2018-10-30T00:00:00
db:JVNDBid:JVNDB-2018-013995date:2019-03-07T00:00:00
db:CNNVDid:CNNVD-201810-1439date:2018-10-31T00:00:00
db:NVDid:CVE-2018-14558date:2018-10-30T18:29:00.580