CVE-2018-5770

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to log in.

• CWE-1188

• https://www.fidusinfosec.com/tenda-ac15-unauthenticated-telnetd-start-cve-2018-5770/Exploit, Third Party Advisory
• https://www.fidusinfosec.com/tenda-ac15-unauthenticated-telnetd-start-cve-2018-5770/Exploit, Third Party Advisory

Published

Mar 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5762The TLS implementation in the TCP/IP networking module in Un…
• CVE-2018-5763An issue was discovered in OXID eShop Enterprise Edition bef…
• CVE-2018-5764The parse_arguments function in options.c in rsyncd in rsync…7.5
• CVE-2018-5766In Libav through 12.2, there is an invalid memcpy in the av_…
• CVE-2018-5767An issue was discovered on Tenda AC15 V15.03.1.16_multi devi…
• CVE-2018-5768A remote, unauthenticated attacker can gain remote code exec…
• CVE-2018-5772In Exiv2 0.26, there is a segmentation fault caused by uncon…
• CVE-2018-5773An issue was discovered in markdown2 (aka python-markdown2) …
• CVE-2018-5776WordPress before 4.9.2 has XSS in the Flash fallback files i…
• CVE-2018-5777An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5778An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5779A vulnerability in the conferencing component of Mitel Conne…