CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

CVE-2023-27240

creationtimestamp| type| source ---|---|--- 2023-03-15 11:24:41+00:00| seen| https://t.me/cibsecurity/60043 2025-08-31 03:12:57+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

CVE-2023-27240

CVE-2023-27240 affects the Tenda AX3 router (V16.03.12.11). The vulnerability is a command-injection flaw in the /goform/AdvSetLanip endpoint exposed via the lanip parameter, caused by inadequate input filtering of command-like characters. This can allow arbitrary command execution with high impa...