CVE-2020-10988

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19

Description A hard-coded telnet credential in the tenda login binary allows unauthenticated remote attackers to start a telnetd service on the device.

Recommendations For Tenda AC15 AC1900 version 15.03.05.19, consider disabling the telnetd service until a patch is available to prevent exploitation. Restrict access to the tenda login binary to minimize the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.