NetSight
critical9.8

CVE-2024-42634

A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42.

Impact

A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges.

Affected products

VendorProductAffected versions
TendaAc9 Firmware
Version 15.03.06.42

Weakness classification

References