Lucene search
PRIOn knowledge basePRION:CVE-2022-24170HistoryFeb 04, 2022 - 2:15 a.m.
Command injection
2022-02-0402:15:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
60.0%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| g1_firmware | eq | 15.11.179502-cn | |
| g3_firmware | eq | 15.11.179502-cn |
Related
cve
cve
CVE-2022-24170
2022-02-04 02:15:11
cvelist
cvelist
CVE-2022-24170
2022-02-04 01:32:58
cnvd
cnvd
Tenda G1 and G3 Command Injection Vulnerability
2022-02-10 00:00:00
nvd
nvd
CVE-2022-24170
2022-02-04 02:15:11
checkpoint_advisories
checkpoint_advisories