Lucene search
K

98 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:37 p.m.1 views

CVE-2022-40107

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

7.5CVSS7.9AI score0.00391EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:25 p.m.1 views

CVE-2022-40100

Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...

9.8CVSS9.8AI score0.02983EPSS
Exploits0References1
OSV
OSV
added 2025/02/21 5:15 p.m.0 views

CVE-2025-25507

There is a RCE vulnerability in Tenda AC6 15.03.05.16multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution...

6.5CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2025/02/21 12:0 a.m.2 views

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A code execution vulnerability exists in the Tenda AC6 that stems from the cmdinput parameter of the formexeCommand function failing to properly filter special elements of the constructed snippet. No details of the vulnerability a...

6.5CVSS7.7AI score0.00758EPSS
Exploits1References2
OSV
OSV
added 2025/02/20 11:15 p.m.0 views

CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmdbuf variable, which is directly used in the doSystemCmd function, causing an arbitrary...

9.8CVSS6AI score
Exploits0References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.1 views

Tenda AC10 安全漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a command injection vulnerability that stems from a command injection vulnerability contained in the formexeCommand function, no details of the vulnerability are provided at this time...

9.8CVSS7.7AI score0.00282EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.2 views

PT-2025-7567 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 V1.0 V15.03.06.23 Description: The issue is related to a command injection vulnerability located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd...

9.8CVSS7.7AI score0.00282EPSS
Exploits0References5
OSV
OSV
added 2025/02/12 7:15 p.m.0 views

CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function...

9.8CVSS6.1AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/12 12:0 a.m.2 views

PT-2025-7079 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V15.03.05.16 Description: The issue is a buffer overflow vulnerability in the formexeCommand function. This vulnerability can be exploited, potentially leading to unauthorized access or control. There is no information...

9.8CVSS7.5AI score0.00179EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/02/12 12:0 a.m.7 views

CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function...

0.00179EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the formexeCommand function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on...

9.8CVSS8.2AI score0.00179EPSS
Exploits1References1
CVE
CVE
added 2025/02/12 12:0 a.m.86 views

CVE-2025-25343

Tenda AC6 router with firmware V15.03.05.16 contains a buffer overflow in the formexeCommand function. The root cause is improper validation of input length in that function, enabling potential arbitrary code execution or denial of service. Exploitation status is not detailed in the provided docu...

9.8CVSS7.2AI score0.00179EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.3 views

PT-2025-7557 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a remote code execution RCE problem. In the formexeCommand function, the parameter cmdinput can cause remote command execution. Recommendations: For Tenda AC6 version...

6.5CVSS8.1AI score0.00758EPSS
Exploits1References7
OSV
OSV
added 2024/09/13 2:15 p.m.0 views

CVE-2024-46049

Tenda O6 V3.0 firmware V1.0.0.72054 contains a stack overflow vulnerability in the formexeCommand function...

9.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/09/13 2:15 p.m.0 views

CVE-2024-46048

Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i...

9.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2024/09/13 12:0 a.m.58 views

CVE-2024-46049

CVE-2024-46049 affects Tenda O6 V3.0 firmware 1.0.0.7(2054) and contains a stack overflow in the internal formexeCommand function. The available connected documentation explicitly pinpoints the vulnerable component as the formexeCommand function and confirms the issue as a stack overflow. The PT-...

9.8CVSS7.5AI score0.00132EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/09/13 12:0 a.m.14 views

CVE-2024-46049

Tenda O6 V3.0 firmware V1.0.0.72054 contains a stack overflow vulnerability in the formexeCommand function...

0.00132EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/09/13 12:0 a.m.2 views

PT-2024-31889 · Tenda · Tenda O6

Name of the Vulnerable Software and Affected Versions: Tenda O6 V3.0 firmware version 1.0.0.72054 Description: The issue is a stack overflow vulnerability in the formexeCommand function. This vulnerability is present in the specified firmware version of the Tenda O6 V3.0 device. Recommendations:...

9.8CVSS7.5AI score0.00132EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2024/09/13 12:0 a.m.10 views

CVE-2024-46048

Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i...

7.7AI score0.58351EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/09/13 12:0 a.m.1 views

Tenda O6 安全漏洞

Tenda O6 is a wireless bridge from Tenda, China. A security vulnerability exists in Tenda O6 version V1.0.0.7, which is caused by a buffer overflow vulnerability in the formexeCommand function. No details of the vulnerability are available at this time...

9.8CVSS7.5AI score0.00132EPSS
Exploits1References2
Rows per page
Query Builder