CVE-2024-32314

2024-04-1700:00:00

mitre

github.com

tenda ac500 firmware

command injection

vulnerability

formexecommand

cmdinput parameter

AI Score

7.6

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:tenda:ac500:-:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "ac500",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.1.9"
      }
    ],
    "defaultStatus": "unknown"
  }
]