Security Advisory

CVE-2024-36604

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-04 17:14:08
Last updated 2025-02-13 15:59:25
Assigner mitre
State PUBLISHED

Description

Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.