CVE-2024-2854

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05

Description The issue is related to the function formSetSambaConf() in the /goform/setsambacfg endpoint, where the usbName parameter is not properly sanitized, leading to OS command injection. This allows a remote attacker to execute arbitrary commands. The exploit has been disclosed to the public.

Recommendations For Tenda AC18 version 15.03.05.05, as a temporary workaround, consider disabling the formSetSambaConf() function until a patch is available. Restrict access to the /goform/setsambacfg endpoint to minimize the risk of exploitation. Avoid using the usbName parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.