cve/CVE-2024-32292.md at d6bcaa53f24d3df2dbf6336b03d1d66a29e9f0f3 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00

0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25

2024-07-25 21:25:12 +00:00

669 B

Raw Blame History

CVE-2024-32292

Description

Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

POC

Reference

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formexecommand_cmdi.md

Github

https://github.com/LaPhilosophie/IoT-vulnerable