CVE-2024-35339

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.84% chance of exploitation in the next 30 days, 77th percentile

Published

2024-05-24

Updated

2025-02-13

Proof-of-concept exploits (1)

• https://palm-vertebra-fe9.notion.site/formWriteFacMac_RCE-d70cf636739e4a769b1f919ffed4a2a0

References

• CVE Record
• NVD entry

Related

• CVE-2024-35333
• CVE-2024-3534
• CVE-2024-3533
• CVE-2024-35340
• CVE-2024-3532
• CVE-2024-3535