Description
A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RAV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:URExploitation Context
as of October 17, 2026- Its current EPSS score (8.6%) is higher than that of 24% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Tenda AC8 | 16.03.50.11 |
References
5 LinksRecord Details
More from Tenda
Tenda AC11 Router Stack Buffer Overflow Vulnerability
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Tenda G103 Setting gpon.lua action_set_net_settings command injection
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.