CVE-2022-24144: Command Injection
Published Feb 4, 2022
·Updated
Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.
Affected Software
2 affected components
Tenda AX3 firmware=16.03.12.10_cn
Tenda AX3
Event History
Feb 4, 2022
CVE Published
via MITRE·01:33 AM
Data Sourced
via MITRE·01:33 AM
Description
Frequently Asked Questions
1
What is CVE-2022-24144?
CVE-2022-24144 is a command injection vulnerability discovered in Tenda AX3 v16.03.12.10_CN firmware.
2
How severe is CVE-2022-24144?
CVE-2022-24144 has a severity rating of 9.8, which is classified as critical.
3
What is the affected software for CVE-2022-24144?
The affected software is Tenda AX3 v16.03.12.10_CN firmware.
4
How can an attacker exploit CVE-2022-24144?
An attacker can exploit CVE-2022-24144 by executing arbitrary commands via the gateway, dns1, and dns2 parameters.
5
Is there a fix available for CVE-2022-24144?
At the moment, there is no information available regarding a fix for CVE-2022-24144.