2 matches found
CVE-2021-45986: Improper Neutralization of Special Elements used in an OS Command
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...
9.8CVSS8.7AI score0.01869EPSS
SaveExploits0References2
PT-2022-12485
Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.179502 CN Description A command injection issue was discovered in the function formSetUSBShareInfo, allowing attackers to execute arbitrary commands via the usbOrdinaryUserName parameter. Recommendations...
9.8CVSS0.01869EPSS
SaveExploits0References4
20