CVE-2023-49435

Tenda AX9 V22.03.01.46 is vulnerable to command injection...

CVE-2023-49435

CVE-2023-49435 affects Tenda AX9 V22.03.01.46. Multiple sources (CNVD, NVD, Red Hat, CNNVD, etc.) describe a command-injection vulnerability in the /goform/SetNetControlList interface where the list parameter does not properly filter special characters/commands, enabling arbitrary command executi...