CVE-2024-42634

A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges...

The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda AC15 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda AC15 router software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...