PT-2022-19714 · Tenda · Tenda Tx9 Pro

Published 2022-05-05 · Updated 2022-05-13 · CVE-2022-29592

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda TX9 Pro version 22.03.02.10

Description The issue allows OS command injection via the set route function, which is called by doSystemCmd route. This enables potential attackers to inject commands into the operating system, posing a significant security risk.

Recommendations For Tenda TX9 Pro version 22.03.02.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-29592

Affected Products

Tenda Tx9 Pro

References · 4

• 🔥❌ https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022-3.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-29592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29592 · Security Note
• https://t.me/cibsecurity/42025 · Telegram Post