CVE-2024-3009

A vulnerability has been found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258295. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-77

• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formWriteFacMac.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258295Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.258295Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.301488Third Party Advisory, VDB Entry
• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formWriteFacMac.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258295Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.258295Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.301488Third Party Advisory, VDB Entry

Published

Mar 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30084Windows Kernel-Mode Driver Elevation of Privilege Vulnerabil…7
• CVE-2024-30085Windows Cloud Files Mini Filter Driver Elevation of Privileg…7.8
• CVE-2024-30086Windows Win32 Kernel Subsystem Elevation of Privilege Vulner…7.8
• CVE-2024-30087Win32k Elevation of Privilege Vulnerability7.8
• CVE-2024-30088Windows Kernel Elevation of Privilege Vulnerability7
• CVE-2024-30089Microsoft Streaming Service Elevation of Privilege Vulnerabi…7.8
• CVE-2024-30090Microsoft Streaming Service Elevation of Privilege Vulnerabi…7
• CVE-2024-30091Win32k Elevation of Privilege Vulnerability7.8
• CVE-2024-30092Windows Hyper-V Remote Code Execution Vulnerability7.5
• CVE-2024-30093Windows Storage Elevation of Privilege Vulnerability7.3
• CVE-2024-30094Windows Routing and Remote Access Service (RRAS) Remote Code…7.8
• CVE-2024-30095Windows Routing and Remote Access Service (RRAS) Remote Code…7.8