← Database

CVE-2021-45401

CRITICAL CVSS: 9.8 Published: 2022-02-18 Modified: 2026-06-17

Description

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function.

Affected Platforms

Tendacn Ac10UTendacn Ac10U Firmware

Weakness Type

CWE-77

References