Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac15_firmware:15.03.05.14:*:*:*:*:*:*:*

part: o version: 15.03.05.14 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc15 Firmware (105cfbfb-620c-539b-aaae-5b83f9b563c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10442 vulnerable 2026-06-08 07:02:26.879439 Tenda AC9/AC15 exeCommand formexeCommand os command injection
MEDIUM (6.3)
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-15T11:02:06.735Z
Updated: 2025-09-15T11:59:00.751Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.