Lucene search
K

98 matches found

Cvelist
Cvelist
added 2024/04/17 12:0 a.m.13 views

CVE-2024-32282

Tenda FH1202 v1.2.0.14408 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...

7.5AI score0.00451EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/17 12:0 a.m.9 views

CVE-2024-32283

Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

7.6AI score0.00326EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.2 views

PT-2024-24489 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations: For Tenda W30E version 1.0...

8.8CVSS7.5AI score0.01025EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.1 views

Tenda AC7 安全漏洞

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts the 802.11ac standard and supports dual-band concurrent transmission with a wireless rate of up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from the...

8.8CVSS8AI score0.03293EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.1 views

Tenda FH1202 安全漏洞

Tenda FH1202 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a total transmission rate of 1200Mbps. The Tenda FH1202 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failing to properly filter...

6.3CVSS7.7AI score0.00451EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.1 views

Tenda AC500 安全漏洞

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. Tenda AC500 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failin...

3.8CVSS7.7AI score0.00702EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.1 views

PT-2024-24503 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is related to a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability can be exploited, potentially allowing unauthorized access or...

3.8CVSS7.5AI score0.00702EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.2 views

PT-2024-24482 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations: For Tenda FH1203 version 2.0.1.6, as ...

7.3CVSS7.5AI score0.00326EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.2 views

PT-2024-24481 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability allows for potential exploitation. Recommendations: For Tend...

6.3CVSS6.9AI score0.00451EPSS
Exploits0References6
CVE
CVE
added 2024/04/17 12:0 a.m.58 views

CVE-2024-32281

CVE-2024-32281 affects Tenda AC7V1.0 firmware 15.03.06.44, with a command injection vulnerability in formexeCommand (cmdinput parameter ), caused by inadequate input handling and failure to filter construct commands. Exploitation could enable arbitrary command execution with network access, low p...

8.8CVSS7.5AI score0.03293EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/17 12:0 a.m.10 views

CVE-2024-32314

Tenda AC500 V2.0.1.91307 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...

7.6AI score0.00702EPSS
Exploits1References1
CNVD
CNVD
added 2024/03/29 12:0 a.m.1 views

Tenda FH1205 formexeCommand method stack buffer overflow vulnerability

The Tenda FH1205 is a home wireless router from China's Tenda, geared toward the average home network environment, providing wireless connectivity. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the...

9CVSS8.4AI score0.0045EPSS
Exploits1References1
CNVD
CNVD
added 2024/03/29 12:0 a.m.1 views

Tenda FH1203 formexeCommand Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the /goform/execCommand file that fails to correctly...

9CVSS8.3AI score0.00354EPSS
Exploits1References1
OSV
OSV
added 2024/03/27 7:15 p.m.0 views

CVE-2024-2990

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

8.8CVSS6.3AI score
Exploits0References4
CVE
CVE
added 2024/03/27 6:31 p.m.46 views

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

9CVSS8.9AI score0.00354EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.2 views

PT-2024-23044 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue has been found in the Tenda FH1202 router, affecting the formexeCommand function in the /goform/execCommand file. The manipulation of the cmdinput argument leads to a stack-based...

9CVSS8.8AI score0.00489EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.1 views

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 formexeCommand method, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

9CVSS8.2AI score0.00489EPSS
Exploits1References5
CNVD
CNVD
added 2024/03/22 12:0 a.m.1 views

Tenda AC10U formexeCommand function buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability, which originates from the cmdinput parameter of the...

9CVSS8.2AI score0.00269EPSS
Exploits1References1
CNVD
CNVD
added 2024/03/19 12:0 a.m.20 views

Tenda AC18 formexeCommand function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...

9CVSS8.3AI score0.00202EPSS
Exploits0References1
OSV
OSV
added 2024/03/17 9:15 a.m.0 views

CVE-2024-2558

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

8.8CVSS6.3AI score
Exploits0References3
Rows per page
Query Builder