CVE-2025-10442 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of…
Medium CVSS: 5.3

CVE-2025-10442

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Vendor
Tenda
Product
Ac9 Firmware
CWE
CWE-77
Yayın Tarihi
2025-09-15 11:15:33
Güncelleme
2025-09-19 20:39:12
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-77 Ac9 Firmware MEDIUM Tenda 2025

Referanslar

https://github.com/2664521593/mycve/blob/main/Tenda/Tenda_AC9_CJ.md https://github.com/2664521593/mycve/blob/main/Tenda/Tenda_AC9_CJ.md#poc https://vuldb.com/?ctiid.323876 https://vuldb.com/?id.323876 https://vuldb.com/?submit.647838 https://vuldb.com/?submit.647839 https://www.tenda.com.cn/