Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.
References
Link | Resource |
---|---|
https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_15/15.md | Broken Link Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-02-03 18:15
Updated : 2022-02-07 07:01
NVD link : CVE-2022-24150
Mitre link : CVE-2022-24150
JSON object : View
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Products Affected
tenda
- ax3
- ax3_firmware