CVE-2023-51972

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-51972
Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://grove-laser-8ad.notion.site/Tenda-AX1803-Command-Injection-in-fromAdvSetLanIp-7b2892fac8234cff90ca15af4947a8e7 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*
History

12 Jan 2024, 19:22

Type Values Removed Values Added
References () https://grove-laser-8ad.notion.site/Tenda-AX1803-Command-Injection-in-fromAdvSetLanIp-7b2892fac8234cff90ca15af4947a8e7 - () https://grove-laser-8ad.notion.site/Tenda-AX1803-Command-Injection-in-fromAdvSetLanIp-7b2892fac8234cff90ca15af4947a8e7 - Exploit, Third Party Advisory
CPE cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*
cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1:*:*:*:*:*:*:*
First Time Tenda ax1803
Tenda ax1803 Firmware
Tenda
Summary
  • (es) Se descubrió que Tenda AX1803 v1.0.0.1 contiene una vulnerabilidad de inyección de comandos a través de la función fromAdvSetLanIp.
CWE CWE-77
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

10 Jan 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-10 13:15

Updated : 2024-01-12 19:22

NVD link : CVE-2023-51972

Mitre link : CVE-2023-51972

CVE.ORG link : CVE-2023-51972

JSON object : View

Products Affected

tenda

  • ax1803_firmware
  • ax1803
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')