CISA Known Exploited Vulnerability

CVE-2020-10987

Tenda · AC1900 Router AC15 Model

Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

Date added 2021-11-03

BOD 22-01 due date 2022-05-03

CWE CWE-78

Ransomware Unknown

CISA description

Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.

Required action

Apply updates per vendor instructions.

Notes & references

https://nvd.nist.gov/vuln/detail/CVE-2020-10987

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

RA-5 · Vulnerability Monitoring and Scanning
SI-2 · Flaw Remediation
CM-6 · Configuration Settings
SI-7 · Software, Firmware, and Information Integrity
CM-8 · System Component Inventory

External lookups

NVD · CVE-2020-10987
CVE.org · CVE-2020-10987
CISA KEV catalog (canonical)