CVE-2023-49437

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49437

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49437

CVE-2023-49437 affects Tenda AX12 (V22.03.01.46). A command injection vulnerability exists in the 'list' parameter of /goform/SetNetControlList, enabling arbitrary command execution. Public sources describe the issue across multiple feeds, with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base...