CVEs-PoC/2020/CVE-2020-10988.md

CVE-2020-10988

Description

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.

POC

Reference

• https://www.ise.io/research/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/cecada/Tenda-AC6-Root-Acces
• https://github.com/stjohn96/ac6-root