CVE-2024-10697: Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection
A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10697?
CVE-2024-10697 is classified as a critical vulnerability.
How do I fix CVE-2024-10697?
To fix CVE-2024-10697, it is recommended to update the firmware of Tenda AC6 to the latest version that addresses this vulnerability.
What components are affected by CVE-2024-10697?
CVE-2024-10697 affects the API Endpoint, specifically the function formWriteFacMac in the Tenda AC6 firmware version 15.03.05.19.
What type of vulnerability is CVE-2024-10697?
CVE-2024-10697 is a command injection vulnerability.
Who is affected by CVE-2024-10697?
Users of the Tenda AC6 firmware version 15.03.05.19 are affected by CVE-2024-10697.