Description
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Critical · 9.8
CVE-2025-44877
EUVD-2025-13239GHSA-p3h7-jggj-frv4
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parame…
Published May 2, 2025 · Updated May 6, 2025 · Assigned by mitre