CVE-2022-45506

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-12-08

Last modified

2025-04-23

Weaknesses

CWE-78

Affected products

• W30e Firmware (Tenda)

References

• https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/delFileName/readme.md