Description


A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Related CPE's


Could not find any relations

Weaknesses



CWE-74CWE-77

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Received

Published

2026-01-05T09:15:54.867Z

39 hours ago

Last modified

2026-01-05T09:15:54.867Z

39 hours ago