Tenda CP3 injection vulnerability

Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...

PT-2025-24101 · Tenda · Tenda Cp3

Name of the Vulnerable Software and Affected Versions: Tenda CP3 version 11.10.00.2311090948 Description: A critical issue has been found, affecting the function sub F3C8C of the file apollo, leading to command injection. The attack can be launched remotely. Recommendations: For Tenda CP3 version...