CVE-2024-52714

A security vulnerability has been detected in Tenda AC6 15.03.06.23. The function get_log_file in the file /goform/getLogFile of the httpd component is affected by OS command injection via manipulation of the argument wans.flag. The attack can be launched remotely and the exploit has been disclosed.

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. The function fromSetWirelessRepeat in the file /goform/WifiExtraSet of the httpd component is affected by OS command injection via manipulation of arguments mac or ssid. The attack can be launched remotely and the exploit has been released.

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. An unknown function in the file /goform/telnet of the httpd component is affected by OS command injection via manipulation of the argument lan.ip. The attack can be launched remotely and the exploit has been disclosed.

The Tenda AC6 device has a command execution vulnerability in the 'sub_ADF3C' function. In the 'formSetIptv' function, the 'list' and 'vlanId' parameters are passed unfiltered, allowing for arbitrary command execution.

The Tenda AC6 device has a command execution vulnerability in the 'sub_ADD50' function. In the 'formSetIptv' function, unfiltered passing of the 'list' and 'vlanId' fields as parameters to the 'sub_ADD50' function allows for command execution.

A vulnerability in the firmware of Tenda AC6 (AC1200) v5.0 and below allows attackers to remove the Wi-Fi password and force the device into open security mode by sending a crafted packet to the goform/setWizard form.

An OS command injection vulnerability was found in Tenda AC6 router version 15.03.06.23 in the formWifiApScan function of the /goform/WifiApScan file. Manipulating the wl2g.public.country or wl5g.public.country arguments allows remote command execution. The exploit is publicly available.

A buffer overflow vulnerability was found in Tenda AC6 router firmware version 15.03.05.16. An unauthenticated remote attacker can cause a denial of service (DoS) by sending an HTTP GET request with oversized schedStartTime and schedEndTime parameters to the /goform/openSchedWifi endpoint.

In Tenda AC6 (AC1200) firmware version 5.0 and below (v02.03.01.114), a vulnerability exists in the /cgi-bin/DownloadFlash component. It allows an attacker to steal all data, including source code and system files, via a crafted GET request.