NetSight
IP …
critical9.8

CVE-2023-23080

Certain Tenda products are vulnerable to command injection.

Impact

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.

Affected products

VendorProductAffected versions
TendaIt7-Lcs Firmware
through 2209020914
TendaIt7-Pcs Firmware
through 2209020914
TendaIt7-Prs Firmware
through 2209020908
TendaCp3 Firmware
through 20220906024_2025
TendaCp7 Firmware
through 1.10.00.2211041403

Weakness classification

CWE-77

References