CVE-2022-45043

Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...

Tenda AX12 操作系统命令注入漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.16cn, which originates from a command injection vulnerability via goform/fastsettinginternetset...

CVE-2022-45043

The CVE-2022-45043 entry pertains to Tenda AX12 devices (V22.03.01.16_cn). The vulnerability is a command injection in the API endpoint goform/fast_setting_internet_set, enabling an attacker with network access and low privileges to achieve high-impact outcomes (confidentiality, integrity, and av...