Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection
Vulnerability Description
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goform_get_cmd_process of the component Ping Tool. The manipulation of the argument url leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-246130 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Tecno TR118 安全漏洞
Vulnerability Description
Tecno TR118是中国Tecno公司的一款便携 4G WiFi。 Tecno TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830版本存在安全漏洞，该漏洞源于对参数url的错误操作会导致操作系统命令注入。
CVSS Information
N/A
Vulnerability Type
N/A