Command Injection Vulnerability in Tenda Routers G1 and G3

CVE-2022-24165

Summary

Tenda routers G1 and G3 are susceptible to a command injection vulnerability found in the formSetQvlanList function. By manipulating the qvlanIP parameter, an attacker can execute arbitrary commands on the affected routers, which may lead to unauthorized access and control over the router's functions. This poses a significant risk for users who may have their network security compromised.

References