CVE-2023-51098

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo...

CVE-2023-51098

The CVE-2023-51098 entry concerns Tenda W9 firmware version 1.0.0.7(4456)_CN, where the formSetDiagnoseInfo function contains a vulnerability allowing command injection. The root cause is the lack of neutralization of special elements in that function, enabling a remote attacker to execute arbitr...