cve/CVE-2024-32283.md at a8969e132322a214e7b78da5711159d6f891f0ab - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00

0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25

2024-07-25 21:25:12 +00:00

656 B

Raw Blame History

CVE-2024-32283

Description

Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.

POC

Reference

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formexecommand_cmdi.md

Github

https://github.com/LaPhilosophie/IoT-vulnerable