Tenda G1 and G3 Command Injection Vulnerability (CNVD-2022-16178)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A command injection vulnerability exists in the Tenda G1 and G3, which can be exploited to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters...

CVE-2022-24171

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters...

PT-2022-16522

Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.179502 CN Description A command injection issue was discovered in the function formSetPppoeServer, allowing attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and...