CVE-2024-36604

published 2024-06-04

CVE-2024-36604: Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
tenda	o3_firmware	—	—

CWE-77