Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mvp-7535-p7rw

Опубликовано: 24 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 7.4

Описание

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 63%
0.01067
Низкий

2.1 Low

CVSS4

7.4 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 7.4
nvd
29 дней назад

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 7.4
fstec
30 дней назад

Уязвимость функции formexeCommand() микропрограммного обеспечения маршрутизаторов Tenda CH22, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 63%
0.01067
Низкий

2.1 Low

CVSS4

7.4 High

CVSS3

Дефекты

CWE-74