4 matches found
CVE-2022-24170
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...
Command injection
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...
PT-2022-16521
Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.179502 CN Description A command injection issue was discovered in the function formSetIpSecTunnel, allowing attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...
CVE-2022-24170: Improper Neutralization of Special Elements used in a Command
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...