What’s Vulnerable › Vulnerabilities

CVE-2017-16936

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-24 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to read arbitrary files via a cgi-bin/luci/request?op=1&path= URI that uses directory traversal sequences after a /usb/ substring.

Affected products

• Tenda AC15: us_ac15v1.0br_v15.03.05.18_multi_td01, us_ac15v1.0br_v15.03.05.19_multi_td01
• Tenda AC18: us_ac18v1.0br_v15.03.05.05_multi_td01, ac18_kf_v15.03.05.19(6318_)_cn
• Tenda AC9: us_ac9v1.0br_v15.03.05.14_multi_td01, ac9_kf_v15.03.05.19(6318_)_cn

References

• https://github.com/Iolop/Poc/tree/master/Router/Tenda
• https://github.com/Iolop/Poc/tree/master/Router/Tenda

Get alerted when CVE-2017-16936 or the next vulnerability affects your stack