Lucene search

CVE-2023-27240

🗓️ 15 Mar 2023 06:08:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Tenda AX3 V16.03.12.11 lanip parameter command injection vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
CNVD	Tenda AX3 Command Injection Vulnerability (CNVD-2023-21670)	17 Mar 202300:00	–	cnvd
Vulnrichment	CVE-2023-27240	15 Mar 202300:00	–	vulnrichment
Cvelist	CVE-2023-27240	15 Mar 202300:00	–	cvelist
NVD	CVE-2023-27240	15 Mar 202306:15	–	nvd
Prion	Command injection	15 Mar 202306:15	–	prion

Nvd

Node

tenda ax3_firmwareMatch16.03.12.11

AND

tenda ax3Match-

Source	Link
github	www.github.com/yjzy00001/CVE/blob/main/vuln/rce/readme.md

Parameter	Position	Path	Description	CWE
lanip	query param	/goform/AdvSetLanip	Command injection vulnerability via the lanip parameter.	CWE-77

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2023 06:15Current

9.8High risk

Vulners AI Score9.8

CVSS39.8

EPSS0.0268

SSVC

CWE-77