CVE-2020-10987
Published 2020-07-13 · Updated 2026-06-17 · Source cve@mitre.org
Summary
CVE-2020-10987 is a critical-severity (CVSS 9.8) vulnerability in Tenda AC1900 Router AC15 Model. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA does not currently list it as used in ransomware campaigns. Tenda has 3 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.
All 3 known-exploited Tenda vulnerabilities →Description
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Tenda — AC1900 Router AC15 Model
Name: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
Date added: 2021-11-03 · Due: 2022-05-03
Required action: Apply updates per vendor instructions.
References
- https://blog.securityevaluators.com/tenda-ac1900-vulnerabilities-discovered-and-exploited-e8e26aa0bc68
- https://www.ise.io/research/
- https://blog.securityevaluators.com/tenda-ac1900-vulnerabilities-discovered-and-exploited-e8e26aa0bc68
- https://www.ise.io/research/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10987