Lucene search
+L

89 matches found

Cvelist
Cvelist
•added 2024/03/28 12:00 a.m.•39 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

7.2AI score0.00807EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/03/27 12:00 a.m.•15 views

Tenda AC18 formsetUsbUnload Method Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from a command injection vulnerability in the deviceName parameter of the...

9.8CVSS7.9AI score0.02302EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/26 9:15 p.m.•19 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

9.8CVSS5.8AI score0.02302EPSS
SaveExploits1References1
NVD
NVD
•added 2024/03/26 9:15 p.m.•26 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

9.8CVSS7.1AI score0.02302EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/03/26 12:00 a.m.•19 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

7.7AI score0.02302EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/26 12:00 a.m.•45 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

7.4AI score0.02302EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•19 views

PT-2024-22454 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue concerns a command injection vulnerability. It is located in the deviceName parameter of the formsetUsbUnload function. Recommendations: For Tenda AC18 version 15.03.05.05, consider...

9.8CVSS7.4AI score0.02302EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/26 12:00 a.m.•96 views

CVE-2024-28545

The Tenda AC18 dual-band wireless router, specifically version V15.03.05.05 , is susceptible to a command injection vulnerability. The flaw resides in the deviceName parameter within the formsetUsbUnload function, which allows for improper neutralization of special elements used in commands. This...

9.8CVSS7.4AI score0.02302EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/03/26 12:00 a.m.•22 views

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from a command injection vulnerability in the deviceName parameter of the...

9.8CVSS7.8AI score0.02302EPSS
SaveExploits1References2
CNVD
CNVD
•added 2023/05/08 12:00 a.m.•21 views

Tenda AC18 setUsbUnload Function Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from the existence of a command injection vulnerability via the deviceName...

9.8CVSS8.3AI score0.02426EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/05 2:15 a.m.•20 views

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

9.8CVSS7.4AI score0.02426EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/05 2:15 a.m.•36 views

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

9.8CVSS9.8AI score0.02426EPSS
SaveExploits1References1
Prion
Prion
•added 2023/05/05 2:15 a.m.•35 views

Command injection

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

7.5CVSS9.8AI score0.02426EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/05/05 12:00 a.m.•50 views

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

10AI score0.02426EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•19 views

Tenda AC18 命令注入漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from the existence of a command injection vulnerability via the deviceName...

9.8CVSS8.2AI score0.02426EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/05/05 12:00 a.m.•12 views

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

9.8AI score0.02426EPSS
SaveExploits1References1
CVE
CVE
•added 2023/05/05 12:00 a.m.•100 views

CVE-2023-30135

The CVE-2023-30135 issue affects Tenda AC18 firmware v15.03.05.19(6318 ) cn, with a command injection vulnerability exposed via the deviceName parameter in the setUsbUnload function. The root cause is insufficient input validation in that function, allowing an attacker to inject commands over the...

9.8CVSS9.7AI score0.02426EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2022/05/12 12:00 a.m.•79 views

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53553)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the devicename parameter in /etting/setDeviceName...

10CVSS3.9AI score0.02541EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/10 2:15 p.m.•9 views

CVE-2022-28910

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName...

10CVSS5.9AI score0.02541EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/10 2:15 p.m.•25 views

CVE-2022-29329

D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings...

10CVSS5.9AI score0.13695EPSS
SaveExploits1References3
Rows per page
Query Builder