CyberRota Analysis
AI-GeneratedThe Tenda CH22 router is vulnerable to a command injection flaw in the formCertListInfo function, which can be exploited remotely by manipulating the Name argument. This high-severity vulnerability (CVSS 8.8) could allow attackers to execute arbitrary commands on the device, potentially compromising network security. Organizations using this router should prioritize patching or mitigating this vulnerability to prevent unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.