140 matches found
CVE-2024-32282
Tenda FH1202 v1.2.0.14408 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32283
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
CVE-2024-32283
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
Tenda FH1202 安全漏洞
Tenda FH1202 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a total transmission rate of 1200Mbps. The Tenda FH1202 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failing to properly filter...
PT-2024-24482 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations: For Tenda FH1203 version 2.0.1.6, as ...
PT-2024-24503 · Tenda · Tenda Ac500
Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is related to a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability can be exploited, potentially allowing unauthorized access or...
PT-2024-24489 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations: For Tenda W30E version 1.0...
Tenda W30E 安全漏洞
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failin...
CVE-2024-32282
Tenda FH1202 v1.2.0.14408 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32283
The Tenda FH1203 dual-band wireless router (version 2.0.1.6 ) is vulnerable to a command injection vulnerability within the formexeCommand function. The flaw exists because the cmdinput parameter fails to properly filter command special characters and other construct commands. An attacker exploit...
CVE-2024-32314: Improper Neutralization of Special Elements used in a Command
Tenda AC500 V2.0.1.91307 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32314
Tenda AC500 V2.0.1.91307 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32283
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
Tenda AC500 安全漏洞
Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. Tenda AC500 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failin...
PT-2024-24481 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability allows for potential exploitation. Recommendations: For Tend...
CVE-2024-32282: Improper Neutralization of Special Elements used in a Command
Tenda FH1202 v1.2.0.14408 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32292: Improper Neutralization of Special Elements used in a Command
Tenda W30E v1.0 V1.0.1.25633 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32283: Improper Neutralization of Special Elements used in a Command
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
CVE-2024-32281: Improper Neutralization of Special Elements used in a Command
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
Tenda AC500 安全漏洞
The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the cmdinput parameter of the formexeCommand method of the /goform/execCommand file. No details of the...