Lucene search
+L

107 matches found

OSV
OSV
added 2024/03/27 7:15 p.m.10 views

CVE-2024-2990

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

8.8CVSS6.3AI score0.01481EPSS
SaveExploits1References4
CVE
CVE
added 2024/03/27 6:31 p.m.71 views

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

9CVSS8.9AI score0.01481EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.23 views

PT-2024-23044 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue has been found in the Tenda FH1202 router, affecting the formexeCommand function in the /goform/execCommand file. The manipulation of the cmdinput argument leads to a stack-based...

9CVSS8.8AI score0.01773EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.8 views

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 formexeCommand method, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

9CVSS8.2AI score0.01773EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.10 views

The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...

9CVSS7.8AI score0.01278EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2024/03/22 12:00 a.m.4 views

Tenda AC10U formexeCommand function buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability, which originates from the cmdinput parameter of the...

9CVSS8.2AI score0.0148EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/03/19 12:00 a.m.43 views

Tenda AC18 formexeCommand function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...

9CVSS8.3AI score0.01278EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/17 9:15 a.m.9 views

CVE-2024-2558

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

8.8CVSS6.3AI score0.01278EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/17 12:00 a.m.11 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which is caused by a stack-based buffer overflow in the cmdinput parameter of the formexeCommand function of the /goform/execCommand file...

9CVSS7.5AI score0.01278EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.18 views

The vulnerability of the formexeCommand function in the wireless access point software Tenda W9 allows a intruder to execute arbitrary code.

The vulnerability of the formexeCommand function in the Tenda W9 wireless access point software exists due to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01896EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/12/26 6:15 p.m.3 views

CVE-2023-51099

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...

9.8CVSS5.8AI score0.01896EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/26 6:15 p.m.34 views

CVE-2023-51099

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...

9.8CVSS0.01896EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/26 6:15 p.m.23 views

Command injection

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...

7.5CVSS8.2AI score0.01896EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/26 12:00 a.m.9 views

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which originates from a command injection vulnerability in the formexeCommand method...

9.8CVSS7.7AI score0.01896EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/26 12:00 a.m.17 views

PT-2023-8322 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue exists due to the lack of neutralization of special elements in the formexeCommand function. This could allow a remote attacker to execute arbitrary code. Recommendations:...

9.8CVSS9.8AI score0.01896EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2023/12/26 12:00 a.m.40 views

CVE-2023-51099

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...

10AI score0.01896EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/23 7:15 p.m.7 views

CVE-2022-40107

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

7.5CVSS6.2AI score0.00995EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/23 7:15 p.m.8 views

CVE-2022-40100

Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...

9.8CVSS5.8AI score0.01503EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/23 7:15 p.m.26 views

Command injection

Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...

7.5CVSS9.8AI score0.01503EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/09/23 7:15 p.m.26 views

Buffer overflow

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

5CVSS7.5AI score0.00995EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder