CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49406

Affected product: Tenda W30E router, version 16.01.0.12(4843). The vulnerability is a Command Execution flaw in the /goform/telnet handler, caused by inadequate filtering of certain characters/commands, enabling arbitrary command execution. Impact is described in sources as high-severity (CVSS v3...