CVE-2024-9793: Tenda AC1206 ate ate_ifconfig_set command injection
Published Oct 10, 2024
·Updated
A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. This vulnerability affects the function ateiwprivset/ateifconfigset of the file /goform/ate. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
2 affected components
All of the following
Tenda Ac1206 Firmware=15.03.06.23
Tenda AC1206
Event History
Oct 10, 2024
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
DescriptionSeverityWeakness
Apr 27, 56937
Event
via FIRST·02:29 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-9793?
CVE-2024-9793 is classified as a critical vulnerability.
2
How do I fix CVE-2024-9793?
To fix CVE-2024-9793, update the Tenda AC1206 firmware to the latest version available.
3
What systems are affected by CVE-2024-9793?
CVE-2024-9793 affects Tenda AC1206 firmware version 15.03.06.23.
4
What type of vulnerability is CVE-2024-9793?
CVE-2024-9793 is a command injection vulnerability.
5
Can CVE-2024-9793 be exploited remotely?
Yes, CVE-2024-9793 can be exploited remotely.