PT-2022-27548 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A command injection issue was discovered via the fileNameMit parameter at the "/goform/delFileName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda W30E...

CVE-2022-45506: Improper Neutralization of Special Elements used in an OS Command

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...