CVE-2022-27082

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo...

CVE-2022-27082

CVE-2022-27082 affects Tenda M3, firmware 1.10 V1.0.0.12(4856). The vulnerability is a command-injection in the /goform/SetInternetLanInfo component, due to improper filtering of command characters. Impact per disclosed data is high/critical (arbitrary command execution; confidentiality, integrit...