Command injection

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

tenda w18e

v16.01.0.8

command injection

hostname parameter

vulnerability

nvd

9.7 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

CPENameOperatorVersion
w18e_firmwareeq16.1.81576

CPE	Name	Operator	Version
	w18e_firmware	eq	16.1.81576

References

github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug2.md