CVE-2024-32301

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function...

CVE-2024-32281

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

CVE-2024-32281

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

CVE-2024-32281

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

CVE-2024-32281

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

CVE-2024-32301

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function...

CVE-2024-32301: Out-of-bounds Read

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function...

CVE-2024-32301

The Tenda AC7 dual-band router (specifically version v15.03.06.44 ) is vulnerable to a stack overflow vulnerability. The flaw exists in the fromWizardHandle function due to the PPW parameter failing to properly validate the length and size of input data. An attacker could exploit this to execute ...

CVE-2024-32281: Improper Neutralization of Special Elements used in a Command

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

CVE-2024-32281

The Tenda AC7V1.0 v15.03.06.44 firmware is vulnerable to a command injection flaw within the formexeCommand function. The root cause is the cmdinput parameter failing to properly filter special characters and commands. An attacker can exploit this lack of input validation to achieve arbitrary com...