CVE-2022-24167

Publication date

2022-02-04 01:33:01

Family

mitre

State

PUBLISHED

Description

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.