CVE-2023-49040

2023-11-2700:00:00

mitre

www.cve.org

tneda ax1803

remote code execution

adslpwd parameter

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

75.3%

JSON

An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.

References

github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_internet_set.md