Command Injection Vulnerability in Tenda AC7 Router

CVE-2024-48825

Summary

The Tenda AC7 router version 15.03.06.44 is susceptible to a command injection vulnerability that allows attackers to execute arbitrary code without requiring authentication. This risk arises from flaws in the ate_ifconfig_set function, which can be exploited through crafted pre-authentication requests, enabling unauthorized access to the system. Users should be vigilant and consider patching or applying mitigations to protect their networks from potential exploitation.

References