Lucene search

Cp3 Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2023-23080

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-P...

9.8CVSS

9.6AI Score

0.056EPSS

2023-02-27 02:15 PM

cve

CVE-2023-30352

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.

9.8CVSS

9.5AI Score

0.001EPSS

2023-05-10 04:15 PM

cve

CVE-2023-30353

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.

9.8CVSS

9.8AI Score

0.003EPSS

2023-05-10 04:15 PM

cve

CVE-2023-30354

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

9.8CVSS

9.2AI Score

0.002EPSS

2023-05-10 04:15 PM