| 标题 | Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon Command Injection |
|---|
| 描述 | A a command execution vulnerability exists in the Tenda HG10 AC1200 Dualband Wi-Fi xPON ONT router. The vulnerability is located in the Boa web server’s formSysCmd interface and is related to improper handling of the sysCmd parameter. Because the system fails to apply sufficient input validation and filtering to this user-controllable parameter, an attacker can inject arbitrary system commands through specially crafted requests. |
|---|
| 来源 | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSysCmd-sysCmd-command.md |
|---|
| 用户 | Abcd1234 (UID 94604) |
|---|
| 提交 | 2026-01-17 15時01分 (3 月前) |
|---|
| 管理 | 2026-01-30 08時57分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 343484 [Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon /boaform/formSysCmd system sysCmd 权限提升] |
|---|
| 积分 | 19 |
|---|