Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-06250
HistoryDec 22, 2023 - 12:00 a.m.

Tenda i29 sysScheduleRebootSet Method Command Execution Vulnerability

2023-12-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
tenda i29
wireless router
chinese company
command execution vulnerability
sysschedulerebootset method
filter construct command
special characters
arbitrary command execution
attacker
exploitation
cnvd

7.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a command execution vulnerability that stems from the sysScheduleRebootSet method failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to cause arbitrary command execution. An attacker could exploit this vulnerability to cause arbitrary command execution.

CPENameOperatorVersion
tenda i29 v1.eq0.0.2
tenda i29 v1.eq0.0.5

7.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

Related for CNVD-2024-06250