EUVD-2024-32476

Malicious code in bioql PyPI...

CVE-2024-3908

A vulnerability classified as critical has been found in Tenda AC500 2.0.1.91307. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-3908 Tenda AC500 WriteFacMac formWriteFacMac command injection

A vulnerability classified as critical has been found in Tenda AC500 2.0.1.91307. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-3908 Tenda AC500 WriteFacMac formWriteFacMac command injection

A vulnerability classified as critical has been found in Tenda AC500 2.0.1.91307. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-3908

CVE-2024-3908 affects Tenda AC500 firmware 2.0.1.9(1307). The flaw is a command-injection in the formWriteFacMac function of /goform/WriteFacMac triggered by manipulating the mac argument. Impact is remote code execution with high confidentiality/integrity/availability risk as per CVSS data; expl...