Lucene search
+L

14 matches found

NVD
NVD
•added 2024/07/25 10:15 p.m.•48 views

CVE-2024-41473

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

9.8CVSS0.06749EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/25 12:00 a.m.•92 views

CVE-2024-41473

The advisory covers CVE-2024-41473 affecting Tenda FH1201 v1.2.0.14, where a command injection vulnerability exists in the mac parameter of ip/goform/WriteFacMac. The vulnerability targets the management interface and could allow an attacker to execute arbitrary commands. Reported impact is high/...

9.8CVSS8.6AI score0.06749EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/25 12:00 a.m.•8 views

CVE-2024-41473: Improper Neutralization of Special Elements used in an OS Command

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

9.8CVSS8.7AI score0.06749EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/25 12:00 a.m.•26 views

PT-2024-5258 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: The issue is related to a command injection vulnerability. It is associated with the lack of data sanitization at the management level, specifically via the mac parameter at the "ip/goform/WriteFacMa...

9.8CVSS9.2AI score0.06749EPSS
SaveExploits1References6
CVE
CVE
•added 2024/05/24 2:49 p.m.•114 views

CVE-2024-35339

The Tenda FH1206 wireless router, specifically version V1.2.0.8(8155) , is susceptible to a command injection vulnerability. The root cause is a failure to properly filter or neutralize special characters and commands within the mac parameter at the /ip/goform/WriteFacMac endpoint. An unauthentic...

9.8CVSS6.1AI score0.0184EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•9 views

CVE-2024-35339: Improper Control of Generation of Code

Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

9.8CVSS6.1AI score0.0184EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/05/18 12:00 a.m.•109 views

Tenda AC5 Code Execution Vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...

9.8CVSS7.8AI score0.01998EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/16 3:15 p.m.•53 views

CVE-2023-31587

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

9.8CVSS9.9AI score0.01998EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/16 12:00 a.m.•55 views

CVE-2023-31587

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10AI score0.01998EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/16 12:00 a.m.•125 views

CVE-2023-31587

CVE-2023-31587 affects Tenda AC5 router V15.03.06.28. A remote code execution (RCE) vulnerability exists via the Mac parameter at ip/goform/WriteFacMac, arising from insufficient input validation on the Mac field. Documented impact is arbitrary code execution with network access. Several sources ...

9.8CVSS9.9AI score0.01998EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•6 views

CVE-2023-31587: Undefined Security Weakness

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

9.8CVSS6.4AI score0.01998EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/14 3:15 a.m.•658 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10CVSS8AI score0.34842EPSS
SaveIn wildExploits1References2
NVD
NVD
•added 2022/06/14 3:15 a.m.•38 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10CVSS0.34842EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/06/14 2:41 a.m.•53 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10AI score0.34842EPSS
SaveExploits1References1
Rows per page
Query Builder