CVE-2018-5770

CVE-2018-5770 affects Tenda AC15 devices, allowing a remote, unauthenticated attacker to enable a telnetd service. This service is protected by a password, but the attacker can leverage pre-existing default root accounts to gain unauthorized access. The vulnerability carries a critical CVSS score of 9.8 due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit intelligence like Metasploit or ExploitDB entries exist, and community discussion is minimal, the presence of default root accounts makes exploitation straightforward for an attacker.