CVE-2022-30023

HIGH

Tenda hg9_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-30023 has a selected CVSS score of 8.8 (high); EIP currently links 1 repository PoC.

Description

Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 21, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

hg9_firmware

Browse Tenda / hg9_firmware
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubHaniwa0x01/CVE-2022-30023Repository PoCby Haniwa0x018Not analyzed2 files

3.1 KiB

GitHub
PoC details

References

4