CVE advisoryKnown Exploit
CVE-2018-14558
Tenda Router Command Injection Vulnerability.
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Certain Tenda router models have a command injection vulnerability. Attackers can execute arbitrary operating system commands, creating a business risk. The issue stems from a function processing untrusted input, impacting affected organizations and systems.