CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

OSV•added 2022/12/08 4:15 p.m.•2 views

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

9.8CVSS5.8AI score0.02461EPSS

Exploits1References1

NVD•added 2022/12/08 4:15 p.m.•16 views

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

9.8CVSS0.02461EPSS

Exploits1References1

Prion•added 2022/12/08 4:15 p.m.•21 views

Command injection

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

7.5CVSS9.8AI score0.02461EPSS

Exploits1References1Affected Software1

Vulnrichment•added 2022/12/08 12:0 a.m.•6 views

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

8AI score0.02461EPSS

Exploits1References1

CVE•added 2022/12/08 12:0 a.m.•76 views

CVE-2022-45506

The CVE-2022-45506 issue affects Tenda W30E firmware version 1.0.1.25(633). Vulnerable component/file: the API endpoint /goform/delFileName, via the fileNameMit parameter, enabling command injection. CVSSv3.1 metrics show a base score of 9.8 (CRITICAL) with Network attack vector, Low attack compl...

9.8CVSS9.7AI score0.02461EPSS

Exploits1References1Affected Software1