cve/2023/CVE-2023-23080.md

### [CVE-2023-23080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23080)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.

### POC

#### Reference
- https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/fxc233/iot-vul