Lucene search

CVE-2024-35340

🗓️ 24 May 2024 15:24:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Tenda FH1206 V1.2.0.8(8155) command injection vulnerability at ip/goform/formexeCommand

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
CNVD	Tenda FH1206 Command Execution Vulnerability	30 May 202400:00	–	cnvd
Cvelist	CVE-2024-35340	24 May 202414:50	–	cvelist
NVD	CVE-2024-35340	24 May 202415:15	–	nvd
Vulnrichment	CVE-2024-35340	1 Jan 197600:00	–	vulnrichment
RedhatCVE	CVE-2024-35340	14 Feb 202501:26	–	redhatcve

Nvd

Node

tenda fh1206_firmwareMatch1.2.0.8(8155)

AND

tenda fh1206Match-

Source	Link
palm-vertebra-fe9	www.palm-vertebra-fe9.notion.site/formexeCommand_RCE-91a5f12ae23a42b4a25f5d1d4de308da

Parameter	Position	Path	Description	CWE
cmdinput	query param	/goform/formexeCommand	Command injection vulnerability that allows an attacker to execute arbitrary commands.	CWE-77

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2024 15:15Current

7.9High risk

Vulners AI Score7.9

CVSS38.6

EPSS0.07542

SSVC

CWE-77