CVE-2023-50989

CVE-2023-50989 affects Tenda i29 router (v1.0, V1.0.0.5). The pingSet method permits command execution because it fails to properly filter construct command special characters, enabling arbitrary command execution. Documented impact is arbitrary commands execution; no exploitation details or acti...

CVE-2023-50983

CVE-2023-50983 affects the Tenda i29 router (firmware v1.0.0.5). The vulnerability exists in the sysScheduleRebootSet function, where inadequate filtering of constructed command characters enables command injection. This can lead to arbitrary command execution with high impact on confidentiality,...

PT-2024-14039 · Tenda · Tenda I29

Name of the Vulnerable Software and Affected Versions: Tenda i29 versions 1.0 V1.0.0.2 through 1.0 V1.0.0.5 Description: The issue allows remote attackers to cause a denial of service DoS via the pingIp parameter in the pingSet function. This can lead to service disruption. Recommendations: For...