CVE-2023-51099

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-12-26

Last modified

2024-08-02

Weaknesses

CWE-78

Affected products

• W9 Firmware (Tenda)

References

• https://github.com/GD008/TENDA/blob/main/W9/W9_execommand/W9_execommand.md