CVE-2023-51098

The CVE-2023-51098 entry concerns Tenda W9 firmware version 1.0.0.7(4456)_CN, where the formSetDiagnoseInfo function contains a vulnerability allowing command injection. The root cause is the lack of neutralization of special elements in that function, enabling a remote attacker to execute arbitr...

CVE-2023-51100

Tenda W9 is affected by CVE-2023-51100 in firmware version 1.0.0.7(4456)_CN. The vulnerability is a command injection via the formGetDiagnoseInfo function. The CVSS 3.1 score is 9.8 (CRITICAL): network-remote vector, no authentication, no user interaction required, with high impact on confidentia...