← All advisories

High severity8.8NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026

CVE-2024-32281

CVE-2024-32281

Description

Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.

Affected products

3

Tenda/Ac7 Firmware
cpe:2.3:o:tenda:ac7_firmware:15.03.06.44:*:*:*:*:*:*:*
Tenda/AC7cpe-rescue
Tenda/AC7V1.0llm-fuzzy
Range: = v15.03.06.44

Patches

Vulnerability mechanics

References

1

github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/formexecommand.mdnvdBroken LinkExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.