Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-7469

Tenda 4G300 DelFil sub_425A28 command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda 4G300

  • US_4G300V1.0Mt_V1.01.42_CN_TDC01affected

References