CVE-2022-24170 | BDVDB-2026-169331 Detail

Description#

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_36/36.md

Exploit#

No public exploit known

History#

Version 12022-02-04Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.