CVE-2022-24168

Publication date

2022-02-04 01:32:59

Family

mitre

State

PUBLISHED

Description

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.