| Title | Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01 Command Injection |
|---|
| Description | A vulnerability was determined in Tenda 4G300 V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file httpd. This manipulation of the argument delflag causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. |
|---|
| Source | ⚠️ https://github.com/Axelioc/CVE/blob/main/Tenda/US_4G300/sub_425A28/sub_425A28.md |
|---|
| User | Haaalion (UID 89556) |
|---|
| Submission | 04/14/2026 10:19 (4 months ago) |
|---|
| Moderation | 04/29/2026 21:21 (15 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 360205 [Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01 /goform/DelFil sub_425A28 delflag command injection] |
|---|
| Points | 18 |
|---|