Command injection

2023-06-0613:15:00

PRIOn knowledge base

www.prio-n.com

tenda g103

gpon terminal

command injection

firmware v1.0.0.5

web management privileges

shell privileges

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges.

CPENameOperatorVersion
g103_firmwareeq1.0.0.5

CPE	Name	Operator	Version
	g103_firmware	eq	1.0.0.5

References

tenda.com

github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf