Skip to content
OpenAdvisories
High · 7.3 CVE-2024-48459 EUVD-2024-43019GHSA-75qh-pv3v-7vpf

A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_70…

Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre

Description

A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and further obtain shell access to the router's file system with the highest privileges.

References