| 제목 | Tenda HG3 N300 Wi-Fi xPON ONT HARD_VERSION=V2.0 , Version: 300003070 Remote code execution |
|---|
| 설명 | A remote code execution vulnerability exists in Tenda-HG3 series IoT devices. This security flaw is caused by the lack of effective parameter filtering and input validation mechanisms, where the device does not properly filter and restrict externally input parameters, resulting in unauthorized command concatenation risks. Malicious attackers can exploit this vulnerability to gain unauthorized access to the device's internal system interfaces, and further execute arbitrary code on the target IoT device, which may lead to the device being controlled, abnormal operation, and other serious security threats. |
|---|
| 원천 | ⚠️ https://www.notion.so/33e0c75766a880488924cf24523acf6c |
|---|
| 사용자 | 2er00ne (UID 91682) |
|---|
| 제출 | 2026. 04. 10. PM 02:34 (5 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 26. PM 10:17 (16 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 359759 [Tenda HG3 2.0 /boaform/formTracert datasize 권한 상승] |
|---|
| 포인트들 | 17 |
|---|