| タイトル | Tenda G103 G103_V1.0.0.5 Command Injection |
|---|
| 説明 | A command injection vulnerability exists in the action_set_net_settings function within the gpon.lua file of Tenda G103 GPON optical network terminals. This vulnerability is caused by improper sanitization of the authSerialNo parameter, which is directly concatenated into system commands without validation. Authenticated attackers can exploit this flaw to execute arbitrary system commands with root privileges, potentially leading to full device compromise. |
|---|
| ソース | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/authSerialNo |
|---|
| ユーザー | n0ps1ed (UID 88889) |
|---|
| 送信 | 2026年03月16日 15:49 (22 日 ago) |
|---|
| モデレーション | 2026年04月01日 16:09 (16 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 354670 [Tenda G103 1.0.0.5 Setting gpon.lua action_set_net_settings 特権昇格] |
|---|
| ポイント | 0 |
|---|