Command injection

2023-12-0716:15:00

PRIOn knowledge base

www.prio-n.com

tenda ax9

v22.03.01.46

command injection

vulnerability

list parameter

setnetcontrollist

nvd

8.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the ‘list’ parameter at /goform/SetNetControlList.

CPENameOperatorVersion
ax9_firmwareeq22.03.01.46

CPE	Name	Operator	Version
	ax9_firmware	eq	22.03.01.46

References

github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList-2.md