CVE-2024-34338

The Tenda O3V2 outdoor wireless bridge is vulnerable to Blind Command Injection in firmware versions V1.0.0.10 through V1.0.0.12 . The flaw exists in the /goform/getTraceroute API endpoint due to improper neutralization of the dest parameter. An authenticated attacker can exploit this to execute ...