60 matches found
Tenda AC500 命令注入漏洞
The Tenda AC500 is a Gigabit port access controller from Tenda, China. A command injection vulnerability exists in Tenda AC500 version 2.0.1.91307, which stems from a command injection issue in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file. No details of the...
CVE-2024-3880
A vulnerability has been found in Tenda W30E 1.0.1.25633 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...
Tenda F1202 formWriteFacMac Method Command Injection Vulnerability
The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...
The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda FH1205 router software allows a hacker to execute arbitrary commands.
The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda FH1205 router’s software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execut...
CVE-2024-30637
Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...
CVE-2024-30637
Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...
CVE-2024-30637
Tenda F1202 v1.2.0.20408 has a command injection vulnerablility in the formWriteFacMac function in the mac parameter...
Tenda FH1203 formWriteFacMac Method Command Injection Vulnerability
Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a command injection vulnerability that stems from the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file failing to properl...
Tenda F1202 安全漏洞
The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...
CVE-2024-30637
CVE-2024-30637 affects Tenda F1202, v1.2.0.20(408). The vulnerability is a command injection in the formWriteFacMac function via the mac parameter, potentially allowing remote command execution. Red Hat/CNVD/CNNVD entries corroborate the issue in the same firmware line and reference the /goform/W...
CVE-2024-3009
A vulnerability has been found in Tenda FH1205 2.0.0.7775 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit h...
Tenda AC7 Command Injection Vulnerability
Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from a buffer...
CVE-2024-2991
A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been...
CVE-2024-2982 Tenda FH1202 WriteFacMac formWriteFacMac command injection
A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and...
Tenda FH1205 命令注入漏洞
The Tenda FH1205 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...
The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda AC15 router software allows a hacker to execute arbitrary commands.
The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda AC15 router software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...
PT-2024-23066 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue has been found, affecting the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been...
Tenda AC7 操作系统命令注入漏洞
Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from a buffer...
The vulnerability of the formWriteFacMac function (/goform/WriteFacMac) in the Tenda AC10U router software, which allows a hacker to execute arbitrary commands.
The vulnerability of the formWriteFacMac function /goform/WriteFacMac in the Tenda AC10U router software relates to the failure to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Tenda AC10 OS Command Injection Vulnerability (CNVD-2024-15743)
The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10U version 15.03.06.49 suffers from an operating system command injection vulnerability, which originates from the mac parameter of the formWriteFacMac function of the /goform/WriteFacMac file failing to correctly filter...