Lucene search

CVE-2022-45497

🗓️ 08 Dec 2022 16:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Tenda W6-S v1.0.0.4(510) command injection vulnerability in tpi_get_ping_output functio

Reporter	Title	Published	Views	Family All 4
CNVD	Tenda W6-S Command Injection Vulnerability	12 Dec 202200:00	–	cnvd
NVD	CVE-2022-45497	8 Dec 202216:15	–	nvd
Prion	Command injection	8 Dec 202216:15	–	prion
Cvelist	CVE-2022-45497	8 Dec 202200:00	–	cvelist

Nvd

Node

tenda w6-s_firmwareMatch1.0.0.4\(510\)

AND

tenda w6-sMatch-

Source	Link
github	www.github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/exeCommand/readme.md

Parameter	Position	Path	Description	CWE
ping	query param	/goform/exeCommand	Command injection vulnerability in the tpi_get_ping_output function.	CWE-78

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2022 16:15Current

9.7High risk

Vulners AI Score9.7

CVSS39.8

EPSS0.00637

CWE-78