Tenda Routers Command Injection (CVE-2022-24170; CVE-2022-24171; CVE-2022-28572; CVE-2022-34595; CVE-2022-34596; CVE-2022-34597)

A command injection vulnerability exists in Tenda Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-34596

The CVE-2022-34596 entry relates to Tenda AX1803 devices (v1.0.0.1_2890) with a command injection vulnerability in the WanParameterSetting function. Multiple connected sources confirm that this flaw allows arbitrary command execution on affected routers, with exploitation via the WanParameterSett...