89 matches found
CVE-2024-30645
Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...
CVE-2024-30593
Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...
CVE-2023-30135
Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...
CVE-2022-28910
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName...
CVE-2025-44872
Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-44872
Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-44872
The Tenda AC9 wireless router, specifically version V15.03.06.42_multi , is susceptible to a command injection vulnerability (CWE-77). The issue resides in the formsetUsbUnload function, where the deviceName parameter fails to properly filter special characters and commands. This allows an attack...
CVE-2025-44872
Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
Netgear DC112A deviceName Command Injection Vulnerability
The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...
CVE-2025-28219
Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...
NETGEAR DC112A 安全漏洞
The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...
PT-2024-38136 · Totolink · Totolink A3600R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue was found in the setdeviceName function of the /cgi-bin/cstecgi.cgi file, where manipulation of the deviceMac/deviceName argument leads to buffer overflow. This can ...
CVE-2024-30645
Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...
CVE-2024-30645
Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...
CVE-2024-30645
Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...
CVE-2024-30645
The Tenda AC15V1.0 wireless router, specifically version V15.03.20_multi , contains a command injection vulnerability. This flaw exists due to the improper neutralization of special elements used in an OS command via the deviceName parameter. Exploitation of this vulnerability could allow an atta...
Tenda AC15 安全漏洞
The Tenda AC15 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC15 version V15.03.20multi, which is caused by a command injection vulnerability in the deviceName parameter...
PT-2024-23542 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda AC15V1.0 version V15.03.20 multi Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the deviceName parameter. Recommendations: For Tenda AC15V1.0 version V15.03.20 multi, avoi...