Tenda M3 Command Injection Vulnerability (CNVD-2022-33121)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setAdInfoDetail fails to properly filter the construction of command special characters, commands, etc., and can be exploited by attackers to cause...