PT-2024-31888
CVE-2024-46048
·
تاريخ النشر
2024-09-13
·
تاريخ التحديث
2026-10-06
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Tenda FH451 version 1.0.0.9
Description
The issue is related to a command injection vulnerability in the
formexeCommand function. This vulnerability allows for the injection of commands, potentially leading to unauthorized access or control.Recommendations
For Tenda FH451 version 1.0.0.9, as a temporary workaround, consider disabling the
formexeCommand function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾