CVE-2024-46048

Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

High · published September 13, 2024

CVSS v3.1
8.8
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

⚡ Tenda FH451's command injection vulnerability is a wake-up call – attackers could control your device remotely with a single command! 🔥 Think of it like a chef who blindly follows any recipe that gets handed to them without checking the ingredients first. This vulnerability allows an attacker to slip in their own instructions, potentially cooking up chaos right in your network kitchen! With this command injection vulnerability, an attacker could execute arbitrary commands on your device, leading to unauthorized access, data leaks, or even complete network compromise. Imagine someone slipping a rogue recipe into your kitchen and taking control of your entire menu! Chef hats off for security, but it’s time to don your superhero cape!

Put simply

Think of it like a chef who blindly follows any recipe that gets handed to them without checking the ingredients first. This vulnerability allows an attacker to slip in their own instructions, potentially cooking up chaos right in your network kitchen! The vulnerability lies in the formexeCommand function of Tenda FH451 v1.0.0.9, which improperly sanitizes user inputs. This flaw allows an attacker to send crafted commands, leading to malicious command execution on the router.

What to do

With this command injection vulnerability, an attacker could execute arbitrary commands on your device, leading to unauthorized access, data leaks, or even complete network compromise. Imagine someone slipping a rogue recipe into your kitchen and taking control of your entire menu! Chef hats off for security, but it’s time to don your superhero cape! To safeguard your network, update your Tenda FH451 to the latest firmware version immediately. Additionally, consider disabling remote management features and regularly audit your network for any suspicious activities. You’ve got this! By taking these steps, you’ll reinforce your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.10534 · 95.8th percentile
Published
2024-09-13T00:00Z
EPSS history
Timeline
  • 13 SEP 00:00Z
    Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i
    cvelistv5