Lucene search
+L

183 matches found

OSV
OSV
•added 2024/04/05 8:15 a.m.•11 views

CVE-2024-30891

A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution...

8.8CVSS6AI score0.01896EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•10 views

PT-2024-23662 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A command injection issue exists, allowing attackers to execute arbitrary commands by constructing cmdinput parameters in the "/goform/exeCommand" API endpoint. Recommendations: For Tenda AC18 versi...

8.8CVSS8.3AI score0.01896EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•2 views

CVE-2024-30891: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution...

8.8CVSS6.2AI score0.01896EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/05 12:00 a.m.•13 views

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that stems from the failure to properly filter construct command special characters, commands...

8.8CVSS8.3AI score0.01896EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/03/29 12:00 a.m.•13 views

Tenda FH1205 formexeCommand method stack buffer overflow vulnerability

The Tenda FH1205 is a home wireless router from China's Tenda, geared toward the average home network environment, providing wireless connectivity. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the...

9CVSS8.4AI score0.01683EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/03/29 12:00 a.m.•9 views

Tenda FH1203 formexeCommand Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the /goform/execCommand file that fails to correctly...

9CVSS8.3AI score0.01481EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/27 7:15 p.m.•13 views

CVE-2024-2990

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

8.8CVSS6.3AI score0.01481EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•2 views

CVE-2024-2990: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

9CVSS6.2AI score0.01481EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•2 views

CVE-2024-2980: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14408. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The...

9CVSS6.3AI score0.01773EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•11 views

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the /goform/execCommand file that fails to correctly...

9CVSS8.2AI score0.01481EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2024/03/22 12:00 a.m.•13 views

The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...

9CVSS7.8AI score0.01278EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2024/03/22 12:00 a.m.•8 views

Tenda AC10U formexeCommand function buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability, which originates from the cmdinput parameter of the...

9CVSS8.2AI score0.0148EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•0 views

CVE-2024-2708: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

9CVSS6.2AI score0.0148EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•12 views

Tenda AC10 安全漏洞

Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability, which originates from the cmdinput parameter of the...

9CVSS8.1AI score0.0148EPSS
SaveExploits1References4
CNVD
CNVD
•added 2024/03/19 12:00 a.m.•67 views

Tenda AC18 formexeCommand function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...

9CVSS8.3AI score0.01278EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/17 12:00 a.m.•16 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which is caused by a stack-based buffer overflow in the cmdinput parameter of the formexeCommand function of the /goform/execCommand file...

9CVSS7.5AI score0.01278EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•8 views

CVE-2024-2558: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

9CVSS6.3AI score0.01278EPSS
SaveExploits0References3
NVD
NVD
•added 2022/12/20 3:15 p.m.•34 views

CVE-2022-46544

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

7.5CVSS0.00824EPSS
SaveExploits1References1
OSV
OSV
•added 2022/12/20 3:15 p.m.•14 views

CVE-2022-46544

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

7.5CVSS6.2AI score0.00824EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/20 3:15 p.m.•30 views

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

5CVSS7.8AI score0.00824EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder