CVE-2018-5770 | BDVDB-2026-98106 Detail

Description#

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to log in.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.fidusinfosec.com/tenda-ac15-unauthenticated-telnetd-start-cve-2018-5770/

Exploit#

No public exploit known

History#

Version 12018-03-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.