CVE-2022-26290

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac...

CVE-2022-26290

CVE-2022-26290 affects Tenda M3 1.10 V1.0.0.12(4856). The vulnerability is a command injection via the /goform/WriteFacMac component caused by improper filtering of constructed commands, enabling arbitrary command execution. The issue is rated high to critical (CVSS v3.1 base score 9.8) and is ne...

CVE-2022-26289

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/exeCommand...

CVE-2022-26289

The CVE concerns a command-injection flaw in Tenda M3 routers, with exploitation via the component /goform/exeCommand. Affected device: Tenda M3 (firmware variant noted as 1.10 V1.0.0.12(4856)). Root cause is not explicitly detailed beyond the command-injection vectors via /goform/exeCommand. Imp...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /cgi-bin/uploadWeiXinPic to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerabili...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setPicListItem fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

PT-2022-18205 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the /cgi-bin/uploadWeiXinPic component. Recommendations: For Tenda M3 version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-18209 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setWorkmode" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-18210 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/SetLanInfo" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

Tenda M3 操作系统命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /goform/WriteFacMac to properly filter the construct command special characters, commands, etc. An attacker could use this vulnerability to cause...

PT-2022-17926 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setFixTools" API endpoint. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the "/goform/setFixTools...

Tenda M3 操作系统命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 has a command injection vulnerability, which originates from the component /goform/exeCommand fails to properly filter the construction of command special characters, commands, etc., which can be exploited by attackers to cause...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setAdInfoDetail fails to properly filter the construction of command special characters, commands, etc., and can be exploited by attackers to cause...

PT-2022-18204 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/delAd" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the "/goform/delAd...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setFixTools fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, China. Tenda M3 is vulnerable to command injection, which stems from the failure of component/goform/setWorkmode to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause arbitrary...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /goform/delAd to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /cgi-bin/uploadAccessCodePic fails to properly filter the construction of command special characters, commands, etc., which can be exploited by attackers to cau...

PT-2022-18206 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setAdInfoDetail" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-18212 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the /cgi-bin/uploadAccessCodePic component. Recommendations: For Tenda M3 version 1.10 V1.0.0.124856, consider restricting access to the...