critical9.8
CVE-2024-36604
Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function.
Impact
Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | O3 Firmware | Version 1.0.0.12\(3880\) |