Security Advisory
CVE-2024-36604
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.