CVE record · 1 source
CVE-2026-129105
CVSS 6.5Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators to inject arbitrary pppd options by…
- Vendor
- Shenzhen Cudy Technology Co., Ltd.
- Product
- TR3000 1.0
- CVSS v3.1
- 6.5 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- Weakness
- CWE-93
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators to inject arbitrary pppd options by…
Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators to inject arbitrary pppd options by embedding quotes and newlines in L2TP credentials. Attackers can submit crafted…