| 제목 | Tenda G103 G103_V1.0.0.5 Command Injection |
|---|
| 설명 | A command injection vulnerability exists in the action_set_net_settings function within the gpon.lua file of Tenda G103 GPON optical network terminals. This vulnerability is triggered only when the modeOption parameter is set to 2 or 3 (manual VLAN mode), due to improper sanitization of the usVlanId parameter. The parameter is directly concatenated into system commands without validation, allowing authenticated attackers to execute arbitrary system commands with root privileges and potentially take full control of the device. |
|---|
| 원천 | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/usVlanId |
|---|
| 사용자 | n0ps1ed (UID 88889) |
|---|
| 제출 | 2026. 03. 16. PM 03:50 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 01. PM 04:10 (16 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 354670 [Tenda G103 1.0.0.5 Setting gpon.lua action_set_net_settings 권한 상승] |
|---|
| 포인트들 | 0 |
|---|