Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Tenda
Command Injection
Ac15 Firmware
Ac5 Firmware
NVD
GitHub
VulDB
CVSS 3.1
9.8
EPSS
2.6%