CVE-2022-27077

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...

CVE-2022-27077

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...

CVE-2022-27077

CVE-2022-27077 affects Tenda M3 1.10 V1.0.0.12(4856). Affected component: /cgi-bin/uploadWeiXinPic . Root cause: failure to properly filter construction of command characters, enabling command injection . Impact: as described, potential arbitrary command execution with network access (CVSS 3.1/9....