Jaden-Bowers/Tenda-Router-VR-and-Exploit

PoC

Writeup for Tenda AC15 router firmware rehosting and remote command execution (CVE-2020-10987) exploit replication.

view exploit source poc_in_githubauthor Jaden-Bowerspublished 2025-10-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10987US	critical9.8OT critical	79.8% (100th)	KEV	2020-07-13
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.