Lucene search
+L

60 matches found

NVD
NVD
added 2024/03/20 5:15 p.m.29 views

CVE-2024-2707

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

8.8CVSS6.8AI score0.046EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/20 5:0 p.m.12 views

CVE-2024-2707 Tenda AC10U WriteFacMac formWriteFacMac os command injection

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

6.5CVSS7.3AI score0.046EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/03/14 12:0 a.m.15 views

PT-2024-2407 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection, allowing remote...

9CVSS7.1AI score0.0405EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2024/01/22 9:15 p.m.4 views

CVE-2023-24135

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

7.8CVSS6.1AI score0.02063EPSS
SaveExploits1References5
Prion
Prion
added 2024/01/22 9:15 p.m.17 views

Command injection

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

4.3CVSS9AI score0.02063EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/22 12:0 a.m.7 views

PT-2024-12024

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia Eagle 1200AC version V15.03.06.33 en Description A command injection issue was discovered in the function formWriteFacMac, allowing attackers to execute arbitrary commands by manipulating the mac parameter. This enables...

7.8CVSS7.2AI score0.02063EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.15 views

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the mac parameter...

10CVSS8.2AI score0.02446EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2023/07/11 12:0 a.m.40 views

Tenda AC10 Command Execution Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC10 version v15.03.06.26. The vulnerability stems from the application failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

9.8CVSS7.4AI score0.02446EPSS
SaveExploits1References1
OSV
OSV
added 2023/07/07 2:15 p.m.5 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS5.8AI score0.02446EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/07/07 2:15 p.m.12 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS7.4AI score0.02446EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/07 2:15 p.m.24 views

Command injection

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

7.5CVSS9.8AI score0.02446EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/07/07 12:0 a.m.10 views

Tenda AC10 命令注入漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC10 version v15.03.06.26. The vulnerability stems from the application failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

9.8CVSS7.7AI score0.02446EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/07/07 12:0 a.m.7 views

PT-2023-4094 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.26 Description: The issue is related to a command injection vulnerability in the function formWriteFacMac, which can be exploited via the mac parameter. This vulnerability may allow a remote attacker to execute...

9.8CVSS9.6AI score0.02446EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:0 a.m.11 views

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary commands...

10CVSS8.1AI score0.02537EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/08/25 3:15 p.m.5 views

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS5.8AI score0.02537EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.5 views

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS5.8AI score0.02537EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/25 3:15 p.m.24 views

Command injection

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

7.5CVSS9.7AI score0.02537EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/25 2:6 p.m.36 views

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

10AI score0.02537EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.10 views

PT-2022-6463 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: The issue is related to a command injection vulnerability in the formWriteFacMac function, specifically via the mac parameter. This vulnerability is associated with a lack of data sanitization at...

9.8CVSS9.6AI score0.02537EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.8 views

Tenda AC1206 操作系统命令注入漏洞

The Tenda AC1206 is a wireless through-the-wall king gigabit router from Tenda China. An operating system command injection vulnerability exists in the Tenda AC1206 version V15.03.06.23, which stems from a command injection issue in the formWriteFacMac method...

9.8CVSS5.7AI score0.02537EPSS
SaveExploits1References2
Rows per page
Query Builder