CVE-2022-27079

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setPicListItem...

CVE-2022-27079

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setPicListItem...

CVE-2022-27079

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setPicListItem...

CVE-2022-27079

CVE-2022-27079 describes a command injection in Tenda M3 1.10 V1.0.0.12(4856) through the component "/goform/setPicListItem". The connected Red Hat/CNVD/CNNVD/PRION/CVELIST entries corroborate the same issue and indicate the vulnerability stems from improper handling of special characters/command...