CVE-2023-33530

2023-06-0600:00:00

mitre

www.cve.org

tenda g103

gpon terminal

firmware v1.0.0.5

command injection

web management privileges

shell privileges

cve-2023-33530

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges.

References

tenda.com

github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf