Volerion logoVolerion
Volerion logoVolerion

Tenda AC9 Command Injection Vulnerability Allowing Remote Code Execution

Vulnerability

A command injection vulnerability has been identified in the Tenda AC9 router, specifically in version 15.03.05.19 of the v1.0 firmware. The issue arises in the '/goform/SetSambaCfg' endpoint, where improper input handling may allow remote attackers to execute arbitrary code on the device.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.0
threat
6.6
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.