CVE-2023-51098

Summary

CVE-2023-51098 is a command injection vulnerability affecting Tenda W9 V1.0.0.7(4456)_CN. Hackers can exploit the function formSetDiagnoseInfo to inject and execute malicious commands on the targeted device. Successful exploitation could result in unauthorized access, data theft, or system damage. Users are advised to update their devices to the latest firmware or contact Tenda support for assistance. This vulnerability underscores the importance of regularly patching and securing IoT devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.