CVE-2022-24150

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.
References
Link Resource
https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_15/15.md Broken Link Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ax3_firmware:16.03.12.10_cn:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*

Information

Published : 2022-02-03 18:15

Updated : 2022-02-07 07:01


NVD link : CVE-2022-24150

Mitre link : CVE-2022-24150


JSON object : View

CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Advertisement

dedicated server usa

Products Affected

tenda

  • ax3
  • ax3_firmware