The vulnerability of the system() function (/boaform/formSysCmd) in the Tenda HG10 optical network terminal software allows a hacker to execute arbitrary commands.

The vulnerability of the system function /boaform/formSysCmd in the microprogramming software for Tenda HG10 optical network terminals is related to the lack of measures taken to neutralize special elements during the processing of the sysCmd parameter. Exploiting this vulnerability allows a remo...