First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-46484

CriticalCVSS 9.8/10Last modified Oct 6, 2026

Description

TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/powalll/682c1b81696888fd692e595598f2ae3eThird Party Advisory

Timeline

Published: Aug 29, 2025
Last modified: Oct 6, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-464856.3dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate CVE-2024-464868.0TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function.CVE-2024-464885.5sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to c CVE-2024-464898.8A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL.CVE-2024-46496.1A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unkno CVE-2024-464945.4A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload CVE-2024-46506.1A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects CVE-2024-465059.1Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities.CVE-2024-4650610.0NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings l CVE-2024-465077.3A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows atta CVE-2024-465087.5yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY CVE-2024-46516.1A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. This issu

CVE-2024-46484: Critical severity, CVSS 9.8 | Vulnix