CVE-2022-29592

Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-05

Last modified

2024-08-03

Weaknesses

CWE-78

Affected products

• Tx9 Pro Firmware (Tenda)

References

• https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022-3.md