Description
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Critical · 9.8
CVE-2025-44872
EUVD-2025-13241GHSA-6jw2-2v2j-w474
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName par…
Published May 2, 2025 · Updated May 6, 2025 · Assigned by mitre