Threats tagged 'ghsa-cfh9-rj2q-vjwm'

A command injection vulnerability exists in Tenda CH22 version 1.0.0.1 affecting the formCertListInfo function in the /goform/CertListInfo endpoint. This vulnerability allows remote attackers with low privileges to execute arbitrary commands by manipulating the Name argument. The vulnerability has a high severity score of 8.8 and has been publicly disclosed, though no known exploits are currently reported in the wild. No patch or remediation information is provided at this time.