Description
Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.
Published: 2023-02-27
Score: 9.8 Critical
EPSS: 4.6% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-27180 Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.
History

Tue, 11 Mar 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Tenda Cp3 Cp3 Firmware Cp7 Cp7 Firmware It7-lcs It7-lcs Firmware It7-pcs It7-pcs Firmware It7-prs It7-prs Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-03-11T14:01:45.140Z

Reserved: 2023-01-11T00:00:00.000Z

Link: CVE-2023-23080

cve-icon Vulnrichment

Updated: 2024-08-02T10:28:40.564Z

cve-icon NVD

Status : Modified

Published: 2023-02-27T14:15:10.613

Modified: 2024-11-21T07:45:50.740

Link: CVE-2023-23080

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses