Lucene search
+L

167 matches found

OSV
OSV
•added 2024/03/29 4:15 p.m.•14 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS5.8AI score0.01049EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/29 4:15 p.m.•34 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS7.2AI score0.01049EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•21 views

PT-2024-23542 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15V1.0 version V15.03.20 multi Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the deviceName parameter. Recommendations: For Tenda AC15V1.0 version V15.03.20 multi, avoi...

8CVSS7.4AI score0.01049EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/29 12:00 a.m.•100 views

CVE-2024-30645

The Tenda AC15V1.0 wireless router, specifically version V15.03.20_multi , contains a command injection vulnerability. This flaw exists due to the improper neutralization of special elements used in an OS command via the deviceName parameter. Exploitation of this vulnerability could allow an atta...

8CVSS7.5AI score0.01049EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/29 12:00 a.m.•19 views

CVE-2024-30645

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

7.5AI score0.01049EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•17 views

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC15 version V15.03.20multi, which is caused by a command injection vulnerability in the deviceName parameter...

8CVSS7.7AI score0.01049EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•1 views

CVE-2024-30645: Improper Neutralization of Special Elements used in an OS Command

Tenda AC15V1.0 V15.03.20multi has a command injection vulnerability via the deviceName parameter...

8CVSS6AI score0.01049EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/28 1:15 p.m.•20 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

9.8CVSS7AI score0.00807EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/28 12:00 a.m.•118 views

CVE-2024-30593

The Tenda FH1202 wireless router (version 1.2.0.14(408) ) contains a stack overflow vulnerability within the formSetDeviceName function. The root cause is a failure to correctly validate the length of the deviceName parameter, leading to data being written outside the buffer in memory. A remote a...

9.8CVSS7.3AI score0.00807EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/28 12:00 a.m.•23 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

7.3AI score0.00807EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/28 12:00 a.m.•34 views

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

7.2AI score0.00807EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•5 views

CVE-2024-30593: Buffer Copy without Checking Size of Input

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

9.8CVSS6AI score0.00807EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/03/27 12:00 a.m.•10 views

Tenda AC18 formsetUsbUnload Method Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from a command injection vulnerability in the deviceName parameter of the...

9.8CVSS7.9AI score0.02302EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/26 9:15 p.m.•14 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

9.8CVSS5.8AI score0.02302EPSS
SaveExploits1References1
NVD
NVD
•added 2024/03/26 9:15 p.m.•20 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

9.8CVSS7.1AI score0.02302EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/26 12:00 a.m.•15 views

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from a command injection vulnerability in the deviceName parameter of the...

9.8CVSS7.8AI score0.02302EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•3 views

CVE-2024-28545: Improper Neutralization of Special Elements used in a Command

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

9.8CVSS6AI score0.02302EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/26 12:00 a.m.•18 views

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

7.7AI score0.02302EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/26 12:00 a.m.•91 views

CVE-2024-28545

The Tenda AC18 dual-band wireless router, specifically version V15.03.05.05 , is susceptible to a command injection vulnerability. The flaw resides in the deviceName parameter within the formsetUsbUnload function, which allows for improper neutralization of special elements used in commands. This...

9.8CVSS7.4AI score0.02302EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•14 views

PT-2024-22454 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue concerns a command injection vulnerability. It is located in the deviceName parameter of the formsetUsbUnload function. Recommendations: For Tenda AC18 version 15.03.05.05, consider...

9.8CVSS7.4AI score0.02302EPSS
SaveExploits1References4
Rows per page
Query Builder