CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: May 3, 2022
High
CISA KEVEPSS 77.3%CVE-2018-14558
Tenda—AC7, AC9, and AC10 Routers
Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.
EPSS — Exploit Probability
77.3%
Higher than 99.0% of all CVEs
Required Action
https://nvd.nist.gov/vuln/detail/CVE-2018-14558
Vulnerability Overview
- Severity
- High
- EPSS
- 77.3%
- CISA KEV
- Yes
- Ransomware
- Unknown
- Published
- Nov 3, 2021
- KEV Added
- Nov 3, 2021
- Due Date
- May 3, 2022
- Related Articles
- 0
Vendor
Tenda
AC7, AC9, and AC10 Routers