4 matches found
CVE-2024-35340
The Tenda FH1206 wireless router, specifically version 1.2.0.8(8155) , is vulnerable to a command injection flaw. The root cause is the cmdinput parameter at the ip/goform/formexeCommand endpoint, which fails to correctly filter special characters and commands. An attacker can exploit this to exe...
CVE-2024-35340: Improper Neutralization of Special Elements used in a Command
Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand...
PT-2024-26441 · Tenda · Tenda Fh1206
Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 Description: A command injection issue was found, which can be exploited via the cmdinput parameter at the "ip/goform/formexeCommand" endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155, avoid usin...
