| 标题 | Tenda AC7 1200M large household 11ac dual-band wireless router V15.03.06.44 Command injection |
|---|
| 描述 | An issue was found in Tenda AC7 V1.0_V15.03.06.44 device: The tendatelnet function handles requests in http without proper handling of the lan_ip parameter and is subsequently concatenated directly with the doSystem system-level function. This can lead to command injection vulnerabilities and can also cause shell metacharacters to be enabled, for example, an attacker may use telnet to remotely access the attacked device. |
|---|
| 来源 | ⚠️ https://github.com/Raining-101/IOT_cve/blob/main/Tenda%20a7%20V15.03.06.44%20Command%20injection.md |
|---|
| 用户 | Raining101 (UID 81770) |
|---|
| 提交 | 2025-02-20 14時17分 (2 年前) |
|---|
| 管理 | 2025-03-01 15時32分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 298092 [Tenda AC7 1200M 15.03.06.44 /goform/telnet TendaTelnet lan_ip 权限提升] |
|---|
| 积分 | 20 |
|---|