CVE-2022-27076

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
References
Link Resource
https://github.com/GD008/vuln/blob/main/tenda_M3_delAd/M3_delAd.md Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:m3_firmware:1.0.0.12\(4856\):*:*:*:*:*:*:*
cpe:2.3:h:tenda:m3:-:*:*:*:*:*:*:*

Information

Published : 2022-03-23 17:15

Updated : 2022-03-29 07:07


NVD link : CVE-2022-27076

Mitre link : CVE-2022-27076


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

tenda

  • m3_firmware
  • m3