| タイトル | Tenda HG3 N300 Wi-Fi xPON ONT HARD_VERSION=V2.0 , Version: 300003070 Remote code execution |
|---|
| 説明 | A remote code execution vulnerability exists in Tenda-HG3 series IoT devices. This security flaw is caused by the lack of effective parameter filtering and input validation mechanisms, where the device does not properly filter and restrict externally input parameters, resulting in unauthorized command concatenation risks. Malicious attackers can exploit this vulnerability to gain unauthorized access to the device's internal system interfaces, and further execute arbitrary code on the target IoT device, which may lead to the device being controlled, abnormal operation, and other serious security threats. |
|---|
| ソース | ⚠️ https://www.notion.so/33e0c75766a880488924cf24523acf6c |
|---|
| ユーザー | 2er00ne (UID 91682) |
|---|
| 送信 | 2026年04月10日 14:34 (4 月 ago) |
|---|
| モデレーション | 2026年04月26日 22:17 (16 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 359759 [Tenda HG3 2.0 /boaform/formTracert datasize 特権昇格] |
|---|
| ポイント | 17 |
|---|