| عنوان | Tenda G103 G103_V1.0.0.5 Command Injection |
|---|
| الوصف | A command injection vulnerability exists in the action_set_net_settings function within the gpon.lua file of Tenda G103 GPON optical network terminals. This vulnerability arises due to improper sanitization of the usVlanPriority parameter, which is directly concatenated into system commands when modeOption is set to 2 or 3 (manual VLAN mode). Authenticated attackers can exploit this flaw to execute arbitrary system commands with root privileges, leading to potential full device compromise. |
|---|
| المصدر | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/usVlanPriority |
|---|
| المستخدم | n0ps1ed (UID 88889) |
|---|
| ارسال | 16/03/2026 03:51 PM (7 أشهر منذ) |
|---|
| الاعتدال | 01/04/2026 04:10 PM (16 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 354670 [Tenda G103 1.0.0.5 Setting gpon.lua action_set_net_settings تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|