cve/CVE-2024-32292.md at a8969e132322a214e7b78da5711159d6f891f0ab - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00

0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25

2024-07-25 21:25:12 +00:00

669 B

Raw Blame History

CVE-2024-32292

Description

Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

POC

Reference

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formexecommand_cmdi.md

Github

https://github.com/LaPhilosophie/IoT-vulnerable