Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda F453 WriteFacMac FormWriteFacMac privilege escalation
Vulnerability Description
A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Tenda F453 命令注入漏洞
Vulnerability Description
Tenda F453是中国腾达(Tenda)公司的一款无线路由器。 Tenda F453 1.0.0.3版本存在命令注入漏洞,该漏洞源于对文件/goform/WriteFacMac中参数mac的错误操作,可能导致命令注入。
CVSS Information
N/A
Vulnerability Type
N/A