Tenda FH1205 命令注入漏洞

The Tenda FH1205 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

Tenda FH1202 命令注入漏洞

The Tenda FH1202 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1202 version 1.2.0.14408, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

PT-2024-23161 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer overflow. Th...

Tenda FH1203 安全漏洞

The Tenda FH1203 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1203 version 2.0.1.6 due to a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda AC15 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda AC15 router software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

Tenda AC15 formWriteFacMac Method Command Injection Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

Tenda AC7 操作系统命令注入漏洞

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from a buffer...

Tenda AC10 OS Command Injection Vulnerability (CNVD-2024-15743)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10U version 15.03.06.49 suffers from an operating system command injection vulnerability, which originates from the mac parameter of the formWriteFacMac function of the /goform/WriteFacMac file failing to correctly filter...

Tenda AC15 操作系统命令注入漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

CVE-2024-2707

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

Tenda AC10 操作系统命令注入漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10U version 15.03.06.49 suffers from an operating system command injection vulnerability, which originates from the mac parameter of the formWriteFacMac function of the /goform/WriteFacMac file failing to correctly filter...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10U version 15.03.06.49, which is caused by a stack-based buffer overflow in the mac parameter of the formSetDeviceName function of the /goform/SetOnlineDevName file...

PT-2024-2345 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U versions 15.03.06.49 Description: The issue is related to the function formWriteFacMac, specifically the /goform/WriteFacMac endpoint, where a lack of proper sanitization of special elements in the command allows for os command...

PT-2024-2347 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: The issue is related to a stack-based buffer overflow in the Tenda AC10U router's firmware, specifically affecting the function formSetFirewallCfg /goform/SetFirewallCfg and formSetDeviceName of th...

PT-2024-2467 · Tenda · Tenda Fh1205

Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical vulnerability has been found in the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be launched...

PT-2024-2491 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: The issue is related to a stack-based buffer overflow in the GetParentControlInfo function of the /goform/GetParentControlInfo file. This can be exploited remotely using a specially crafted POST...

CVE-2023-24135

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

CVE-2023-24135

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...

Command injection

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter...