Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setFixTools...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo...

CVE-2022-27083

CVE-2022-27083 affects Tenda M3, version 1.10 V1.0.0.12(4856), with a command injection vulnerability in the /cgi-bin/uploadAccessCodePic component. The root cause is improper filtering of command characters in that endpoint, allowing arbitrary command execution. CVSS metrics indicate a network-a...

CVE-2022-27083

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic...

CVE-2022-27082

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo...

CVE-2022-27081

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo...

CVE-2022-27082

CVE-2022-27082 affects Tenda M3, firmware 1.10 V1.0.0.12(4856). The vulnerability is a command-injection in the /goform/SetInternetLanInfo component, due to improper filtering of command characters. Impact per disclosed data is high/critical (arbitrary command execution; confidentiality, integrit...

CVE-2022-27081

The CVE-2022-27081 entry concerns Tenda M3 with version 1.10 V1.0.0.12(4856). The vulnerability is a command injection in the /goform/SetLanInfo component caused by insufficient input filtering, enabling arbitrary command execution. Affected product/version details are consistently cited across m...

CVE-2022-27080

CVE-2022-27080 affects Tenda M3, specifically version 1.10 V1.0.0.12(4856). The vulnerability is a command injection in the /goform/setWorkmode endpoint caused by improper filtering of special characters in command construction. Impact is described as arbitrary command execution with high severit...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-27079

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setPicListItem...

CVE-2022-27079

CVE-2022-27079 describes a command injection in Tenda M3 1.10 V1.0.0.12(4856) through the component "/goform/setPicListItem". The connected Red Hat/CNVD/CNNVD/PRION/CVELIST entries corroborate the same issue and indicate the vulnerability stems from improper handling of special characters/command...

CVE-2022-27078

CVE-2022-27078 affects Tenda M3 1.10 V1.0.0.12(4856) via /goform/setAdInfoDetail, with a command injection flaw due to improper input handling. The connected sources confirm the vulnerable component and version, and describe arbitrary command execution potential, but do not provide a specific pat...

CVE-2022-27078

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail...

CVE-2022-27077

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...

CVE-2022-27076

CVE-2022-27076 concerns the Tenda M3 router, specifically version 1.10 V1.0.0.12(4856). Evidence across multiple connected sources confirms a command injection vulnerability in the component /goform/delAd , caused by improper handling of command characters. The resulting impact is arbitrary comma...