Tenda Routers Command Injection (CVE-2022-24170; CVE-2022-24171; CVE-2022-28572; CVE-2022-34595; CVE-2022-34596; CVE-2022-34597)

A command injection vulnerability exists in Tenda Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-34597

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

CVE-2022-34597

CVE-2022-34597 affects Tenda AX1806 v1.0.0.1. The WanParameterSetting function is susceptible to command injection, enabling arbitrary command execution with network access and no authentication required (per CVSS 3.1: CRITICAL, 9.8). Concrete details: vulnerable component is WanParameterSetting;...

CVE-2022-34597

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...