Lucene search
+L

5 matches found

BDU FSTEC
BDU FSTEC
•added 2026/01/12 12:00 a.m.•13 views

The vulnerability of the ate_ifconfig_set() function in Tenda AC7 router software allows a hacker to execute arbitrary commands.

The vulnerability of the ateifconfigset function in Tenda AC7 router software relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8CVSS6.1AI score0.01737EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/10/28 8:15 p.m.•13 views

CVE-2024-48825

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

8.8CVSS6.1AI score0.01737EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•3 views

CVE-2024-48825: Improper Neutralization of Special Elements used in an OS Command

Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

8.8CVSS8.1AI score0.01737EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/10 12:00 a.m.•8 views

Tenda AC1206 命令注入漏洞

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a command injection vulnerability that stems from manipulation of the ateiwprivset/ateifconfigset functions in the file /goform/ate, which can lead to command injection. No detailed vulnerability details...

9.8CVSS7.7AI score0.23111EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/10 12:00 a.m.•2 views

CVE-2024-9793: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. This vulnerability affects the function ateiwprivset/ateifconfigset of the file /goform/ate. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS6.4AI score0.23111EPSS
SaveExploits1References1
Rows per page
Query Builder