提出 #774933: Tenda F453 v1.0.0.3 Command Injection情報

タイトルTenda F453 v1.0.0.3 Command Injection
説明A vulnerability was found in Tenda F453 v1.0.0.3. Affected by this vulnerability is the function FormWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac with an unknown input leads to a command injection vulnerability.In FormWriteFacMac function,the value of the mac is inserted into command using doSystemCmd,and the value of mac will be finally executed.
ソース⚠️ https://github.com/Litengzheng/vul_db/blob/main/F453/vul_95/README.md
ユーザー
 LtzHust (UID 95660)
送信2026年03月08日 03:45 (7 月 ago)
モデレーション2026年03月21日 17:57 (14 days later)
ステータス承諾済み
VulDBエントリ352381 [Tenda F453 1.0.0.3 /goform/WriteFacMac FormWriteFacMac mac 特権昇格]
ポイント20

Do you know our Splunk app?

Download it now for free!