CVE-2022-31446

CRITICAL

Tenda ac18_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2022-31446 has a selected CVSS score of 9.8 (critical).

Description

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 22, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

ac18_firmware

Browse Tenda / ac18_firmware
VulnCheckVersion data not supplied

References

2