Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hxxp-cx9w-cj3w

Опубликовано: 27 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.4
CVSS3: 8.8

Описание

A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 90%
0.04075
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.8
nvd
3 месяца назад

A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

CVSS3: 8.8
fstec
3 месяца назад

Уязвимость функции formgponConf файла /boaform/admin/formgponConf микропрограммного обеспечения маршрутизатора Tenda HG3, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 90%
0.04075
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-77