Tenda AC18 Command Injection Vulnerability in Samba Configuration Function

A command injection vulnerability has been identified in the Tenda AC18 router, specifically in the firmware version V15.03.05.19. The issue arises in the formSetSambaConf function, where the usbName parameter is extracted from a POST request and passed to the doSystemCmd function without adequate input validation. This vulnerability enables attackers to execute arbitrary commands by manipulating the usbName value, potentially leading to remote command execution.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device, with the possibility of executing commands remotely.