The vulnerability of the action_set_systemSettings() function in the SettingHandler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.

The vulnerability of the actionsetsystemSettings function in the SettingHandler component of the GPON-terminal software framework Tenda G103 is related to the lack of measures to sanitize input data during the processing of the lanIp parameter. Exploiting this vulnerability could allow a remote...