CVE-2022-24167

CVE-2022-24167 affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). The vulnerability is a command injection in the formSetDMZ function, exploitable via the dmzHost1 parameter to execute arbitrary commands. Impact is consistent with a high/severe condition per accompanying CVSS data (network-b...