CVE-2022-27077

CVE-2022-27077 affects Tenda M3 1.10 V1.0.0.12(4856). Affected component: /cgi-bin/uploadWeiXinPic . Root cause: failure to properly filter construction of command characters, enabling command injection . Impact: as described, potential arbitrary command execution with network access (CVSS 3.1/9....

CVE-2022-27076

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/delAd...

CVE-2022-26536

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setFixTools...

CVE-2022-26536

CVE-2022-26536 affects Tenda M3 firmware version 1.10 V1.0.0.12(4856) and is caused by a command injection vulnerability in the /goform/setFixTools API endpoint. The Red Hat and CNVD entries confirm a remote command execution risk, with no public exploitation details provided in the documents. Th...

CVE-2022-26290

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac...

CVE-2022-26290

CVE-2022-26290 affects Tenda M3 1.10 V1.0.0.12(4856). The vulnerability is a command injection via the /goform/WriteFacMac component caused by improper filtering of constructed commands, enabling arbitrary command execution. The issue is rated high to critical (CVSS v3.1 base score 9.8) and is ne...

CVE-2022-26289

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/exeCommand...

CVE-2022-26289

The CVE concerns a command-injection flaw in Tenda M3 routers, with exploitation via the component /goform/exeCommand. Affected device: Tenda M3 (firmware variant noted as 1.10 V1.0.0.12(4856)). Root cause is not explicitly detailed beyond the command-injection vectors via /goform/exeCommand. Imp...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /cgi-bin/uploadAccessCodePic fails to properly filter the construction of command special characters, commands, etc., which can be exploited by attackers to cau...

PT-2022-18212 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the /cgi-bin/uploadAccessCodePic component. Recommendations: For Tenda M3 version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-17926 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setFixTools" API endpoint. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the "/goform/setFixTools...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setPicListItem fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/SetLanInfo fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary comma...

PT-2022-18209 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setWorkmode" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

PT-2022-18205 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the /cgi-bin/uploadWeiXinPic component. Recommendations: For Tenda M3 version 1.10 V1.0.0.124856, consider restricting access to the...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setAdInfoDetail fails to properly filter the construction of command special characters, commands, etc., and can be exploited by attackers to cause...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setFixTools fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

PT-2022-18206 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setAdInfoDetail" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, China. Tenda M3 is vulnerable to command injection, which stems from the failure of component/goform/setWorkmode to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause arbitrary...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, China. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /goform/SetInternetLanInfo to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to caus...