NetSight
critical9.8

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST re…

Impact

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.

Affected products

VendorProductAffected versions
TendaAc15 Firmware
Version 15.03.05.20

Weakness classification

References