Описание
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter.
Ссылки
- Broken LinkExploitThird Party Advisory
- Broken LinkExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:tenda:ax3_firmware:16.03.12.10_cn:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.09137
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77
Связанные уязвимости
github
почти 4 года назад
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter.
EPSS
Процентиль: 92%
0.09137
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77