EUVD-2022-37548

Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

CVE-2022-34596

Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

CVE-2022-34596: Improper Neutralization of Special Elements used in an OS Command

Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

CVE-2022-34597: Improper Neutralization of Special Elements used in an OS Command

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

Tenda AX1806: Operating System Command Injection Vulnerability

Tenda AX1806 is a WiFi6 wireless router from Tenda, China.A command injection vulnerability exists in Tenda AX1806 v1.0.0.1, which stems from the failure of the WanParameterSetting function to properly filter the construct command special characters, commands, etc. The vulnerability can be...

PT-2022-22227 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 2890 Description: A command injection issue was found in the WanParameterSetting function. Recommendations: For Tenda AX1803 version 1.0.0.1 2890, consider disabling the WanParameterSetting function until a patch ...

Tenda AX1803: Operating System Command Injection Vulnerability

Tenda AX1803 is a dual-band gigabit WIFI6 router from Tenda China.Tenda AX1803 v1.0.0.12890 version of the command injection vulnerability, which stems from the WanParameterSetting function fails to properly filter the construct command special characters, commands, etc.. An attacker could exploi...

PT-2022-22228 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a command injection vulnerability. It affects the WanParameterSetting function, allowing for potential command injection. Recommendations: For Tenda AX1806 version 1.0.0.1, as ...

CVE-2022-24144

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters...

CVE-2022-24144

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters...

Command injection

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters...

CVE-2022-24144

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters...

CVE-2022-24144: Improper Neutralization of Special Elements used in a Command

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters...

PT-2022-16494

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Description A command injection issue was found in the WanParameterSetting function, allowing attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters. Recommendations For Tenda AX3...

Tenda AC9 /goform/WanParameterSetting DNS1 Command Injection Vulnerability

The Tenda AC9 is a wireless router. A security vulnerability in the Tenda AC9 /goform/WanParameterSetting implementation for handling DNS1 POST parameters allows remote attackers to exploit the vulnerability by submitting a special request that can execute arbitrary OS commands...

PT-2019-17453

Name of the Vulnerable Software and Affected Versions Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route version AC9V1.0 Firmware V15.03.05.16multiTRU Description A command injection issue exists in the /goform/WanParameterSetting functionality. This can be triggered by a specially crafte...

CVE-2019-5072: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...

CVE-2019-5071: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...

PT-2019-17454

Name of the Vulnerable Software and Affected Versions Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route version AC9V1.0 Firmware V15.03.05.16multiTRU Description An exploitable command injection issue exists in the /goform/WanParameterSetting functionality. A specially crafted HTTP POST...