CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

CVE-2022-35555

A command injection vulnerability exists in the Tenda W6 wireless WiFi AP router, specifically affecting version 1.0.0.9(4122) . The flaw resides in the /goform/exeCommand API endpoint, where improper neutralization of special elements allows an attacker to construct cmdinput parameters for arbit...