cve/2022/CVE-2022-24171.md
2024-05-25 21:48:12 +02:00

771 B

CVE-2022-24171

Description

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.

POC

Reference

No PoCs from references.

Github