CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

CVE-2023-27240

creationtimestamp| type| source ---|---|--- 2023-03-15 11:24:41+00:00| seen| https://t.me/cibsecurity/60043 2025-08-31 03:12:57+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

CVE-2023-27240

The Tenda AX3 (Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router), specifically version V16.03.12.11 , is vulnerable to a command injection vulnerability. The root cause is the lanip parameter at the /goform/AdvSetLanip API endpoint, which fails to correctly filter special characters and comma...