← Database

CVE-2022-24144

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.

Affected Platforms

Tenda Ax3 FirmwareTenda Ax3

Weakness Type

CWE-77

References