CVE-2022-37810: Improper Neutralization of Special Elements used in an OS Command

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

Tenda AC1206: Operating System Command Injection Vulnerability

The Tenda AC1206 is a wireless through-the-wall king gigabit router from Tenda China. An operating system command injection vulnerability exists in the Tenda AC1206 version V15.03.06.23, which stems from a command injection issue in the formWriteFacMac method...