CVE-2022-24150: Command Injection
Published Feb 4, 2022
·Updated
Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.
Affected Software
2 affected components
Tenda AX3 firmware=16.03.12.10_cn
Tenda AX3
Event History
Feb 4, 2022
CVE Published
via MITRE·01:33 AM
Data Sourced
via MITRE·01:33 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Tenda AX3 v16.03.12.10_CN?
The vulnerability ID for Tenda AX3 v16.03.12.10_CN is CVE-2022-24150.
2
What is the severity level of CVE-2022-24150?
CVE-2022-24150 has a severity level of critical.
3
What is the affected software version for CVE-2022-24150?
The affected software version for CVE-2022-24150 is Tenda Ax3 Firmware 16.03.12.10_CN.
4
How can an attacker exploit CVE-2022-24150?
An attacker can exploit CVE-2022-24150 by executing arbitrary commands via the remoteIp parameter.
5
Is Tenda AX3 vulnerable to CVE-2022-24150?
No, Tenda AX3 is not vulnerable to CVE-2022-24150.