CVE-2024-3009

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258295. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-300907.0Microsoft Streaming Service Elevation of Privilege VulnerabilityCVE-2024-300917.8Win32k Elevation of Privilege VulnerabilityCVE-2024-300927.5Windows Hyper-V Remote Code Execution VulnerabilityCVE-2024-300937.3Windows Storage Elevation of Privilege VulnerabilityCVE-2024-300947.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-300957.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-300965.5Windows Cryptographic Services Information Disclosure VulnerabilityCVE-2024-300978.8Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityCVE-2024-300987.5Windows Cryptographic Services Security Feature Bypass VulnerabilityCVE-2024-300997.0Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-30108.8A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the CVE-2024-301007.8Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-3009: High severity, CVSS 8.8 | Vulnix