Command Execution Vulnerability in Tenda W30E Router

CVE-2023-49406

Summary

The Tenda W30E V16.01.0.12(4843) router is susceptible to a command execution vulnerability that arises from the improper handling of user input in the /goform/telnet function. An attacker can exploit this flaw to execute arbitrary commands on the device, potentially compromising network integrity and allowing unauthorized access to sensitive configurations. It is crucial for users of this router to assess their security posture and apply necessary patches or mitigations to safeguard against potential exploits.

References