The vulnerability of the formSetIptv() function in the microprogramming software for Tenda AC6 allows a hacker to execute arbitrary commands.

The vulnerability of the formSetIptv function in the Tenda AC6 router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing parameters list and vlanId. Exploiting this vulnerability allows a...