PT-2023-31034 · Tneda · Tenda Ax1803
CVE-2023-49040
·
Publicado
2023-11-27
·
Atualizado
2024-10-11
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tneda AX1803 version 1.0.0.1
Description
The issue allows a remote attacker to execute arbitrary code via the
adslPwd parameter in the form fast setting internet set function.Recommendations
For Tneda AX1803 version 1.0.0.1, consider restricting access to the
form fast setting internet set function until a patch is available. Avoid using the adslPwd parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tenda Ax1803