← Back to browse · API

CVE-2024-28545

Severity

CRITICAL

CVSS

9.8

EPSS

0.02302

Risk score

40.01

CISA KEV

No

PoC

No

Published

2024-03-26

Modified

2024-08-06

First seen

2026-08-07

Aliases

EUVD-2024-25642, GHSA-G3PJ-7FP2-JHXR

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-25642

Description

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.

References