CVE-2024-35340

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.

CVSS v3.1

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS

1.22% chance of exploitation in the next 30 days, 67th percentile

Published

2024-05-24

Updated

2025-02-13

Proof-of-concept exploits (1)

• https://palm-vertebra-fe9.notion.site/formexeCommand_RCE-91a5f12ae23a42b4a25f5d1d4de308da

References

• CVE Record
• NVD entry

Related

• CVE-2024-3534
• CVE-2024-3535
• CVE-2024-35339
• CVE-2024-3536
• CVE-2024-35333
• CVE-2024-35362