CVE-2025-1819

CVE-2025-1819 affects the Tenda AC7 1200M (firmware 15.03.06.44). The vulnerability is in the TendaTelnet function under /goform/telnet, where improper handling of the lan_ip argument enables an OS command injection that can be triggered remotely. Exploitation has been disclosed publicly per mult...

Tenda AC7 命令注入漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44. The vulnerability stems from the TendaTelnet function in the /goform/telnet file failing to properly filter constructor command special characters, commands, et...

CVE-2025-1819: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lanip leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

PT-2025-9253

Name of the Vulnerable Software and Affected Versions Tenda AC7 versions up to 15.03.06.44 Description A critical vulnerability was found in Tenda AC7, affecting the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to a stack-based...

PT-2025-9191 · Tenda · Tenda Ac7 1200M

Name of the Vulnerable Software and Affected Versions: Tenda AC7 1200M version 15.03.06.44 Description: A critical vulnerability was found in the TendaTelnet function of the file /goform/telnet. The manipulation of the lan ip argument leads to os command injection. It is possible to launch the...

CVE-2024-2894

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2024-2895

A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. This vulnerability affects the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be initiated remotely. The explo...

Tenda AC7 ate_iwpriv_set function command injection vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a command injection vulnerability that stems from ateiwprivset failing to correctly filter construct command special characters, commands, and so on. An attacker can exploit this vulnerability to execute...

Tenda AC7 ate_ifconfig_set function command injection vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a command injection vulnerability that stems from ateifconfigset failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary command...

CVE-2024-48825

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

CVE-2024-48826

Tenda AC7 v.15.03.06.44 ateiwprivset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

CVE-2024-48825

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

Tenda AC7 安全漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a command injection vulnerability that stems from ateifconfigset failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary command...

CVE-2024-48825

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

CVE-2024-48826

Tenda AC7 v.15.03.06.44 ateiwprivset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

CVE-2024-48825

CVE-2024-48825 affects the Tenda AC7 router (v15.03.06.44) with a pre-authentication command injection in the ate_ifconfig_set function, enabling remote attackers to execute arbitrary code. The vulnerability is reported across multiple sources (NVD, CNVD, CNNVD, CVE records) with high impact (con...

CVE-2024-48825

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

CVE-2024-48826

Tenda AC7 v.15.03.06.44 ateiwprivset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

PT-2024-33243 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: The issue allows remote attackers to execute arbitrary code due to a pre-authentication command injection in the ate ifconfig set function. Recommendations: For Tenda AC7 version 15.03.06.44, update ...

CVE-2024-48826

CVE-2024-48826 affects Tenda AC7 firmware, specifically v15.03.06.44, where the pre-authentication ate_iwpriv_set function permits command injection that can lead to remote code execution. Impact is high (remote, unauthenticated, with total impact per sources). Publicly reported details describe ...