CVE-2023-23080
קריטית 9.8
תיאור (מקור, אנגלית)
Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 2% (אחוזון 100) נכון ל-24/10/2026
- CWE
- CWE-77
מוצרים מושפעים
tenda: it7-lcs firmware; tenda: it7-lcs; tenda: it7-pcs firmware; tenda: it7-pcs; tenda: it7-prs firmware; tenda: it7-prs; tenda: cp3 firmware; tenda: cp3; tenda: cp7 firmware; tenda: cp7
קישורים
- https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC ExploitThird Party Advisory
- https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC ExploitThird Party Advisory