CVE-2022-45497

CRITICAL CVSS: 9.8 Published: 2022-12-08 Modified: 2026-06-17

Description

Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.

Affected Platforms

Tenda W6-STenda W6-S Firmware

Weakness Type

CWE-78, CWE-78

References