-
Tenda W9 V1.0.0.7(4456): goform/exeCommand cmdinput OS Command Injection (Pre-Auth, Root RCE)
-
Tenda M3 V1.0.0.12(4856): goform/setFixTools hostName OS Command Injection (Authenticated, Root RCE)
-
Tenda B6 V1.0.0.4(4420): goform/setTraceroute destination OS Command Injection (Authenticated, Root RCE)
-
TP-LINK TL-XAP3000GI-PoE V4.0 1.0.23: dms set_password Unauthenticated Administrator Password Change (Pre-Auth, Account Takeover)
-
TP-LINK TL-IPCX4XEP-AZ V2.0 1.0.6: tmpd tmp_execute_shell_cmd OS Command Injection (Incomplete Blacklist, Root RCE)
-
TP-Link TL-AP302P V2.0 1.0.6: debug_server UDP 60001 Hidden Backdoor Command Execution (Unauthenticated, Root RCE)
-
TP-Link TL-SG2024D V6.0 3.11.2: Management Interface Hidden Debug Backdoor (Unauthenticated, Arbitrary Internal Function Execution)
-
TP-LINK TL-NVR6104K-L4P V1.0 1.0.26: dsd Network Diagnosis addr OS Command Injection (Authenticated, Root RCE)
-
Tenda TDC01/TDE01 V1.0.0.2(2714): goform/pingSet pingIp OS Command Injection (Authenticated, Root RCE)
-
Tenda O5 V1.0.0.8(5017): httpd goform tracerouteCommand cmdinput OS Command Injection (Authenticated, Root RCE)