CVE-2022-24167

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter...

CVE-2022-24167

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter...

CVE-2022-24167

CVE-2022-24167 affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). The vulnerability is a command injection in the formSetDMZ function, exploitable via the dmzHost1 parameter to execute arbitrary commands. Impact is consistent with a high/severe condition per accompanying CVSS data (network-b...