CVE-2023-49431

creationtimestamp| type| source ---|---|--- 2023-12-30 19:01:47+00:00| seen| https://t.me/ctinow/160950...

CVE-2023-49431

Summary : CVE-2023-49431 impacts Tenda AX9 routers, specifically version V22.03.01.46. A command injection vulnerability exists in the mac parameter of the API endpoint /goform/SetOnlineDevName . The issue arises from inadequate filtering of constructor characters/commands, enabling arbitrary com...