3 matches found
CVE-2022-45506
Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...
9.8CVSS0.02486EPSS
SaveExploits1References1
CVE-2022-45506
The CVE-2022-45506 issue affects Tenda W30E firmware version 1.0.1.25(633). Vulnerable component/file: the API endpoint /goform/delFileName, via the fileNameMit parameter, enabling command injection. CVSSv3.1 metrics show a base score of 9.8 (CRITICAL) with Network attack vector, Low attack compl...
9.8CVSS9.7AI score0.02486EPSS
SaveExploits1References1Affected Software1
20