CVE-2023-33530

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-06-06

Last modified

2026-07-09

Weaknesses

CWE-77

Affected products

• G103 Firmware (Tenda)

References

• https://github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf