Lucene search
+L

89 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:05 a.m.•24 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS7.6AI score0.01049EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:04 a.m.•20 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

9.8CVSS7.3AI score0.00807EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•16 views

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

9.8CVSS8AI score0.02426EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:43 p.m.•21 views

CVE-2022-28910

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName...

10CVSS7.9AI score0.02541EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/04 12:07 a.m.•41 views

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS8.3AI score0.01905EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/02 3:15 p.m.•25 views

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS0.01905EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/02 12:00 a.m.•92 views

CVE-2025-44872

The Tenda AC9 wireless router, specifically version V15.03.06.42_multi , is susceptible to a command injection vulnerability (CWE-77). The issue resides in the formsetUsbUnload function, where the deviceName parameter fails to properly filter special characters and commands. This allows an attack...

9.8CVSS8AI score0.01905EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/02 12:00 a.m.•10 views

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

8.2AI score0.01905EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/03/31 12:00 a.m.•22 views

Netgear DC112A deviceName Command Injection Vulnerability

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

9.8CVSS8.1AI score0.12811EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/03/28 2:15 p.m.•20 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

9.8CVSS6.1AI score0.12811EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•18 views

NETGEAR DC112A 安全漏洞

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

9.8CVSS7.9AI score0.12811EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/29 12:00 a.m.•27 views

PT-2024-38136 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue was found in the setdeviceName function of the /cgi-bin/cstecgi.cgi file, where manipulation of the deviceMac/deviceName argument leads to buffer overflow. This can ...

9CVSS8.8AI score0.0118EPSS
SaveExploits1References8
osv_cve
osv_cve
•added 2024/03/29 4:15 p.m.•18 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS5.8AI score0.01049EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/29 4:15 p.m.•39 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS7.2AI score0.01049EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/29 12:00 a.m.•23 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

7.5AI score0.01049EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 12:00 a.m.•109 views

CVE-2024-30645

The Tenda AC15V1.0 wireless router, specifically version V15.03.20_multi , contains a command injection vulnerability. This flaw exists due to the improper neutralization of special elements used in an OS command via the deviceName parameter. Exploitation of this vulnerability could allow an atta...

8CVSS7.5AI score0.01049EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•20 views

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC15 version V15.03.20multi, which is caused by a command injection vulnerability in the deviceName parameter...

8CVSS7.7AI score0.01049EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•24 views

PT-2024-23542 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15V1.0 version V15.03.20 multi Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the deviceName parameter. Recommendations: For Tenda AC15V1.0 version V15.03.20 multi, avoi...

8CVSS7.4AI score0.01049EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/28 12:00 a.m.•25 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

7.3AI score0.00807EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/28 12:00 a.m.•39 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

7.2AI score0.00807EPSS
SaveExploits1References1
Rows per page
Query Builder