CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the Tenda HG10 router, specifically in the formgponConf function of the Boa web server, allowing for OS command injection via the fmgpon_loid parameter. This flaw enables remote attackers to execute arbitrary commands on the affected device, posing significant risks to network integrity and security. Organizations using this router should prioritize immediate patching or mitigation measures to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.