Tenda HG6 3.3.0 Remote Command Injection
Posted by deepcore on May 4, 2022 – 4:31 am
Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the pingAddr and traceAddr HTTP POST parameters in formPing, formPing6, formTracert and formTracert6 interfaces.
Post a reply
You must be logged in to post a comment.