Command injection

2023-12-2618:15:00

PRIOn knowledge base

www.prio-n.com

tenda w9

v1.0.0.7

command injection

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.5%

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .

CPENameOperatorVersion
w9_firmwareeq1.0.74456-cn

CPE	Name	Operator	Version
	w9_firmware	eq	1.0.74456-cn

References

github.com/GD008/TENDA/blob/main/W9/W9_getDiagnoseInfo/W9_getDiagnoseInfo.md