← Database

CVE-2022-24150

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.

Affected Platforms

Tenda Ax3 FirmwareTenda Ax3

Weakness Type

CWE-77

References