Tenda AC23 Service Port 7329 ate command injection

CVE-2023-2649

Summary

A command injection vulnerability exists in the Tenda AC23 router's service port 7329, specifically within the /bin/ate file. This vulnerability allows attackers to manipulate the v2 argument, enabling them to execute arbitrary commands remotely. This risk is further heightened by the lack of response from Tenda upon disclosure, which could lead to potential exploitation in real-world scenarios. As the exploit is public, it presents significant security challenges for affected users.

References