Approved changes feed: RSS · Atom

cpe:2.3:o:tecno-mobile:4g_portable_wifi_tr118_firmware:v008-20220830:*:*:*:*:*:*:*

part: o version: v008-20220830 update: *

VendorTecno Mobile (35331ebb-3989-550c-b70c-fdd4b455ce1b)
Product4G Portable Wifi Tr118 Firmware (96321946-26e1-58d7-8f85-342e4e4e264a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10195 vulnerable 2026-06-03 14:54:05.104129 Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection
MEDIUM (4.7)
A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goform_get_cmd_process of the component SMS Check. The manipulation of the argument order_by leads to sql injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-10-20T08:31:03.986Z
Updated: 2024-10-21T19:28:34.492Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.