CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

PT-2022-18209 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setWorkmode" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, China. Tenda M3 is vulnerable to command injection, which stems from the failure of component/goform/setWorkmode to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause arbitrary...