CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

Command injection

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

Tenda M3 命令注入漏洞

Tenda M3 is an access control from Tenda, China. Tenda M3 is vulnerable to command injection, which stems from the failure of component/goform/setWorkmode to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause arbitrary...

PT-2022-18209 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.10 V1.0.0.124856 Description: A command injection issue was found in the component "/goform/setWorkmode" of the affected software. Recommendations: For version 1.10 V1.0.0.124856, consider restricting access to the...