Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-06246
HistoryDec 22, 2023 - 12:00 a.m.

Tenda i29 pingSet Method Command Execution Vulnerability

2023-12-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
tenda i29
wireless router
command execution
vulnerability
pingset method
filter
construct command
special characters
arbitrary command execution
attacker
exploit
cnvd

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a command execution vulnerability that stems from the pingSet method failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to cause arbitrary command execution. An attacker can exploit this vulnerability to cause arbitrary command execution.

CPENameOperatorVersion
tenda i29 v1.eq0.0.2
tenda i29 v1.eq0.0.5

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

Related for CNVD-2024-06246