| |
Vulnerability CVE-2023-49429
Published: 2023-12-07 Modified: 2023-12-14
| Description: |
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules. |
Type:
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
References: |
https://github.com/ef4tless/vuln/blob/master/iot/AX9/setDeviceInfo.md
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
