43 matches found
CVE-2025-9090 Tenda AC20 Telnet Service telnet websFormDefine command injection
A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...
PT-2025-33607 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A vulnerability was identified in the Telnet Service component of Tenda AC20. The websFormDefine function within the /goform/telnet file is affected, leading to command injection. The attack can be...
Tenda AC20 注入漏洞
The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a command injection vulnerability that originates from the websFormDefine function in the /goform/telnet file failing to properly filter constructor command special characters, commands, etc. This...
Tenda RX3 命令注入漏洞
Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a command injection vulnerability that stems from the failure of the file /goform/telnet to properly filter construct...
CVE-2025-46631
Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...
CVE-2025-25632
Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet...
CVE-2025-1819
A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lanip leads to os command injection. It is possible to launch the attack remotely. The exploit has been...
Tenda AC7 命令注入漏洞
Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44. The vulnerability stems from the TendaTelnet function in the /goform/telnet file failing to properly filter constructor command special characters, commands, et...
CVE-2025-0528
A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched...
CVE-2024-42978
An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2024-42947
An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...
Tenda FH1201 安全漏洞
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...
PT-2024-30218 · Tenda · Tenda Fh1201
Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. Recommendations: For Tenda FH1201 version 1.2.0.14, as a temporary...
PT-2024-7662 · Tenda · Tenda Fh1206
Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version v02.03.01.35 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. The vulnerability is related to the lack of input data sanitization...
The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E allows a hacker to execute arbitrary commands.
The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E is related to the lack of measures taken to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attack...
The vulnerability of the Telnet protocol implementation in Wi-Fi routers powered by Tenda AX3 software allows a hacker to execute arbitrary commands.
The vulnerability of the Telnet protocol implementation in Wi-Fi routers powered by Tenda AX3 software lies in the lack of measures to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
CVE-2023-49406
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49406
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
