{"id":"CVE-2023-31587","aliases":["EUVD-2023-35884","GHSA-jppc-qcqx-cx45"],"status":"published","title":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE)...","description":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01998,"percentile":0.80899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-05-16T00:00:00Z","modified":"2026-06-17T05:57:13Z","products":[{"vendor":"tenda","product":"ac5_firmware"}],"references":[{"url":"https://www.tenda.com.cn/product/AC5.html","tags":["x_transferred","Patch"]},{"url":"https://www.tenda.com.cn/download/detail-2740.html","tags":["x_transferred","Product"]},{"url":"https://github.com/yanbushuang/CVE/blob/main/TendaAC5.md","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31587"},{"url":"https://github.com/advisories/GHSA-jppc-qcqx-cx45"}],"sources":{"cve":[{"id":"CVE-2023-31587","description":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2025-01-27T21:07:10.517Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-35884","description":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2025-01-27T21:07:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-jppc-qcqx-cx45","title":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE)...","description":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.","status":"published","published":"2023-05-16T15:30:14Z","modified":"2024-04-04T04:12:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:56:21.734223Z"}],"nvd":[{"id":"CVE-2023-31587","description":"Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.","status":"published","published":"2023-05-16T15:15:09.277Z","modified":"2026-06-17T05:57:13.16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:02.399327Z"}]}}