CVE-2023-51100

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo...

CVE-2023-51100

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:15+00:00| seen| https://t.me/ctinow/159411 2023-12-30 08:16:22+00:00| seen| https://t.me/ctinow/160792...

CVE-2023-51100

Tenda W9 is affected by CVE-2023-51100 in firmware version 1.0.0.7(4456)_CN. The vulnerability is a command injection via the formGetDiagnoseInfo function. The CVSS 3.1 score is 9.8 (CRITICAL): network-remote vector, no authentication, no user interaction required, with high impact on confidentia...