Security Advisory

CVE-2022-24144

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-04 01:33:25
Last updated 2024-08-03 04:07:01
Assigner mitre
State PUBLISHED

Description

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.