Descripción
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS 8.8EPSS 2.2159999999999997%Riesgo 1.06
Ver fuente- Publicación
- 2026-08-09 10:17:10
- Última modificación
- 2026-08-10 16:19:29
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H