CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the Tenda CH22 router, specifically in the formexeCommand function of the /goform/exeCommand file, allowing remote attackers to execute arbitrary commands on the device. This high-severity flaw poses significant risks to the security and integrity of the affected network, making it imperative for users of Tenda CH22 routers to prioritize immediate remediation. Network administrators and security teams should take action to mitigate potential exploitation, given the public disclosure of the exploit.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.