Логотип exploitDog
bind:CVE-2025-7415
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-7415

Количество 3

Количество 3

nvd логотип

CVE-2025-7415

около 2 месяцев назад

A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-8rh5-vg2f-g4x4

около 2 месяцев назад

A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
EPSS: Низкий
fstec логотип

BDU:2025-08756

около 2 месяцев назад

Уязвимость функции fromTraceroutGet() (/goform/getTraceroute) микропрограммного обеспечения беспроводных точек доступа Tenda O3, позволяющая нарушителю выполнить произвольные команды

CVSS3: 6.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-7415

A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
1%
Низкий
около 2 месяцев назад
github логотип
GHSA-8rh5-vg2f-g4x4

A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 6.3
1%
Низкий
около 2 месяцев назад
fstec логотип
BDU:2025-08756

Уязвимость функции fromTraceroutGet() (/goform/getTraceroute) микропрограммного обеспечения беспроводных точек доступа Tenda O3, позволяющая нарушителю выполнить произвольные команды

CVSS3: 6.3
1%
Низкий
около 2 месяцев назад

Уязвимостей на страницу