CVE-2024-36604

Publication date

2024-06-04 17:14:08

Family

mitre

State

PUBLISHED

Description

Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.