← Database

CVE-2022-24171

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.

Affected Platforms

Tendacn G3 FirmwareTendacn G1 FirmwareTendacn G1Tendacn G3

Weakness Type

CWE-77

References