CVE-2023-27076

Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-04-10

Last modified

2025-05-05

Weaknesses

CWE-78

Affected products

• G103 Firmware (Tenda)

References

• https://github.com/B2eFly/Router/blob/main/Tenda/G103/1.md