CVE-2023-49437

https://notcve.org/view.php?id=CVE-2023-49437

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList. Se ha descubierto que Tenda AX12 V22.03.01.46 contiene una vulnerabilidad de inyección de comandos en el parámetro 'lista' en /goform/SetNetControlList. • https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetNetControlList-3.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •