6 matches found
CVE-2024-35340
Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand...
CVE-2024-35340
The Tenda FH1206 wireless router, specifically version 1.2.0.8(8155) , is vulnerable to a command injection flaw. The root cause is the cmdinput parameter at the ip/goform/formexeCommand endpoint, which fails to correctly filter special characters and commands. An attacker can exploit this to exe...
PT-2024-26441
Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.88155 Description A command injection issue was found, which can be exploited via the cmdinput parameter at the "ip/goform/formexeCommand" endpoint. Recommendations For Tenda FH1206 version 1.2.0.88155, avoid using t...
CVE-2024-35340: Improper Neutralization of Special Elements used in a Command
Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand...
Tenda FH1206 security vulnerabilities
The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 version 1.2.0.88155 suffers from a command execution vulnerability, which stems from the cmdinput parameter of ip/goform/formexeCommand failing to correctly filter constructed command special characters, commands, etc., whic...
