CVE-2021-44971

Summary: CVE-2022-28557 is a command-injection vulnerability in the Tenda AC15 web interface (/goform/setsambacfg) that can lead to unconditional arbitrary command execution. It can cooperate with CVE-2021-44971 to achieve this. The vulnerability is reported within Red Hat/RedHat-derived advisori...

CVE-2021-44971: Incorrect Comparison

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20multi?AC5V1.0 Firmware V15.03.06.48multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE...