Command injection

2023-12-0715:15:00

PRIOn knowledge base

www.prio-n.com

tenda ax12 v22.03.01.46

command injection

vulnerability

mac parameter

setonlinedevname

nvd

8.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ‘mac’ parameter at /goform/SetOnlineDevName.

CPENameOperatorVersion
ax12_firmwareeq22.03.01.46

CPE	Name	Operator	Version
	ax12_firmware	eq	22.03.01.46

References

github.com/ef4tless/vuln/blob/master/iot/AX12/SetOnlineDevName.md