CVE-2020-10986

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19

Description A CSRF issue allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page, specifically targeting the "goform/SysToolReboot" endpoint.

Recommendations For Tenda AC15 AC1900 version 15.03.05.19, consider disabling access to the /goform/SysToolReboot endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using this endpoint in production environments until the issue is resolved.