CVE-2023-23080

CVSS V2 None CVSS V3 None
Description
Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.
Overview
  • CVE ID
  • CVE-2023-23080
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-27T14:15:10
  • Last Modified Date
  • 2023-03-07T16:55:09
Weakness Enumerations
CWE URL
CWE-77 http://cwe.mitre.org/data/definitions/77.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:tenda:it7-lcs_firmware:*:*:*:*:*:*:*:* 1 OR 2209020914
cpe:2.3:h:tenda:it7-lcs:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:tenda:it7-pcs_firmware:*:*:*:*:*:*:*:* 1 OR 2209020914
cpe:2.3:h:tenda:it7-pcs:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:tenda:it7-prs_firmware:*:*:*:*:*:*:*:* 1 OR 2209020908
cpe:2.3:h:tenda:it7-prs:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:tenda:cp3_firmware:*:*:*:*:*:*:*:* 1 OR 20220906024_2025
cpe:2.3:h:tenda:cp3:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:tenda:cp7_firmware:*:*:*:*:*:*:*:* 1 OR 1.10.00.2211041403
cpe:2.3:h:tenda:cp7:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC Exploit Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-23080
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23080
History
Created Old Value New Value Data Type Notes
2023-04-17 05:29:27 Added to TrackCVE
2023-04-17 05:29:30 Weakness Enumeration new