Tenda FH1206 mac parameter command injection vulnerability

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a command injection vulnerability, which originates from the mac parameter of ip/goform/WriteFacMac failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be...

The vulnerability of the addVlan function (/view/networkConfig/vlan/vlan_add_commit.php) in the Tenda FH1206 router software allows a hacker to trigger a service failure.

The vulnerability of the addVlan function /view/networkConfig/vlan/vlanaddcommit.php of the Tenda FH1206 router software relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2024-35339

Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

CVE-2024-35339

The Tenda FH1206 wireless router, specifically version V1.2.0.8(8155) , is susceptible to a command injection vulnerability. The root cause is a failure to properly filter or neutralize special characters and commands within the mac parameter at the /ip/goform/WriteFacMac endpoint. An unauthentic...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a command injection vulnerability, which originates from the mac parameter of ip/goform/WriteFacMac failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be...

CVE-2024-35339: Improper Control of Generation of Code

Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

VulnCheck KEV: CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

CVE-2024-3908

A vulnerability classified as critical has been found in Tenda AC500 2.0.1.91307. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed...

Tenda AC500 命令注入漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A command injection vulnerability exists in Tenda AC500 version 2.0.1.91307, which stems from a command injection issue in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file. No details of the...

Tenda F1202 formWriteFacMac Method Command Injection Vulnerability

The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...

The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda FH1205 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda FH1205 router’s software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of the GetParentControlInfo() function (/goform/GetParentControlInfo) in the Tenda FH1205 router software allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the GetParentControlInfo function /goform/GetParentControlInfo in the Tenda FH1205 router software lies in the issue of the operation going beyond the buffer in memory when processing the mac parameter. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2024-30637

Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...

CVE-2024-30637

Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...

CVE-2024-30637

Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...

CVE-2024-30637: Improper Neutralization of Special Elements used in a Command

Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...

PT-2024-2459 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: The issue is related to the formWriteFacMac function, specifically the /goform/WriteFacMac API endpoint, where a command injection vulnerability exists due to inadequate data cleaning at the...

CVE-2024-30637

The Tenda F1202 router, specifically version v1.2.0.20(408) , is susceptible to a command injection vulnerability within the formWriteFacMac function (specifically the /goform/WriteFacMac API endpoint). The root cause is a lack of adequate data cleaning measures for the mac parameter. An attacker...

Tenda F1202 安全漏洞

The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...

Tenda FH1203 formWriteFacMac Method Command Injection Vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a command injection vulnerability that stems from the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file failing to properl...