Command injection

2022-02-0402:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

51.7%

JSON

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.

CPENameOperatorVersion
g1_firmwareeq15.11.179502-cn
g3_firmwareeq15.11.179502-cn

CPE	Name	Operator	Version
	g1_firmware	eq	15.11.179502-cn
	g3_firmware	eq	15.11.179502-cn

References

github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_39/39.md

0.002 Low

EPSS

Percentile

51.7%

JSON

Related for PRION:CVE-2022-24167