CVE-2017-16936 is a Directory Traversal vulnerability affecting multiple Tenda AC series routers, including the AC9, AC15, and AC18 models with specific firmware versions. This flaw allows remote, unauthenticated attackers on the local network to read arbitrary files on the device. Rated Medium severity with a CVSS score of 6.5, the vulnerability is easily exploitable over the network with no user interaction required, potentially leading to full disclosure of sensitive information. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
us_ac9v1.0br_v15.03.05.14_multi_td01CPE matchmatch criteria | cpe:2.3:o:tenda:ac9_firmware:us_ac9v1.0br_v15.03.05.14_multi_td01:*:*:*:*:*:*:* | ||
ac9_kf_v15.03.05.19\(6318_\)_cnCPE matchmatch criteria | cpe:2.3:o:tenda:ac9_firmware:ac9_kf_v15.03.05.19\(6318_\)_cn:*:*:*:*:*:*:* | ||
us_ac15v1.0br_v15.03.05.18_multi_td01CPE matchmatch criteria | cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.18_multi_td01:*:*:*:*:*:*:* | ||
us_ac15v1.0br_v15.03.05.19_multi_td01CPE matchmatch criteria | cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.19_multi_td01:*:*:*:*:*:*:* | ||
us_ac18v1.0br_v15.03.05.05_multi_td01CPE matchmatch criteria | cpe:2.3:o:tenda:ac18_firmware:us_ac18v1.0br_v15.03.05.05_multi_td01:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.