critical9.8
CVE-2024-42634
A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42.
Impact
A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac9 Firmware | Version 15.03.06.42 |