CyberRota Analysis
AI-GeneratedA critical command injection vulnerability exists in multiple Tenda router models, allowing remote attackers to exploit the CAte::HandleCmd function within the ATE Module. Successful exploitation can lead to unauthorized command execution on the affected devices, posing significant risks to network integrity and data security. Organizations using these Tenda products should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.