Description
A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriority results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tenda G103
1.0.0.5affected
References
- https://vuldb.com/vuln/354670 ↗
- https://vuldb.com/vuln/354670/cti ↗
- https://vuldb.com/submit/781132 ↗
- https://vuldb.com/submit/781133 ↗
- https://vuldb.com/submit/781134 ↗
- https://vuldb.com/submit/781135 ↗
- https://vuldb.com/submit/781142 ↗
- https://vuldb.com/submit/781143 ↗
- https://vuldb.com/submit/781144 ↗
- https://vuldb.com/submit/781145 ↗
- https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/authLoid ↗
- https://www.tenda.com.cn/ ↗