CVE-2024-2812

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to initiate the attack remotely. The...

EUVD-2024-27756

Malicious code in bioql PyPI...

CVE-2024-2812 Tenda AC15 WriteFacMac formWriteFacMac os command injection

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to initiate the attack remotely. The...

CVE-2024-2812 Tenda AC15 WriteFacMac formWriteFacMac os command injection

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to initiate the attack remotely. The...

CVE-2024-2812

CVE-2024-2812 affects Tenda AC15 (versions 15.03.05.18–15.03.20_multi) via the formWriteFacMac /goform/WriteFacMac endpoint. The mac argument can be manipulated to trigger OS command injection, enabling remote code execution. Public exploitation has been disclosed. Related sources confirm the iss...