Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:o3_firmware:1.0.0.10:*:*:*:*:*:*:*

part: o version: 1.0.0.10 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductO3 Firmware (9e90da4c-58cc-588b-a906-7c24274c8625)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34338 vulnerable 2026-06-08 06:37:33.133991 Details available
Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTraceroute. This vulnerability allows attackers to execute arbitrary commands with root privileges. Authentication is required to exploit this vulnerability.
Published: 2024-05-09T17:51:16.015Z
Updated: 2025-02-13T15:53:24.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.