Command injection

2023-12-2618:15:00

PRIOn knowledge base

www.prio-n.com

tenda w9

command injection

vulnerability

formsetdiagnoseinfo

security

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.5%

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .

CPENameOperatorVersion
w9_firmwareeq1.0.74456-cn

CPE	Name	Operator	Version
	w9_firmware	eq	1.0.74456-cn

References

github.com/GD008/TENDA/blob/main/W9/W9_setDiagnoseInfo/W9_setDiagnoseInfo.md