CVE-2025-44872 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerab…
Critical CVSS: 9.8

CVE-2025-44872

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Vendor
Tenda
Product
Ac9 Firmware
CWE
CWE-77
Yayın Tarihi
2025-05-02 15:15:49
Güncelleme
2025-05-27 14:21:40
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Ac9 Firmware CRITICAL Tenda 2025

Referanslar

https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formsetUsbUnload https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formsetUsbUnload