Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-28545


Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.


Published

2024-03-26T21:15:53.070

Last Modified

2025-03-13T21:09:23.830

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-77

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tenda ac18_firmware 15.03.05.05 Yes
Hardware tenda ac18 - No

References