CVE-2023-23080

CriticalCVSS 9.8/10Last modified Oct 24, 2026

Description

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2023
Last modified
Oct 24, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-230824.6A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an impropCVE-2023-230869.8Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.CVE-2023-230879.8An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.CVE-2023-230889.8Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via thCVE-2023-23096.1The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-SitCVE-2023-23105.3A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) couCVE-2023-231087.5In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in tCVE-2023-231097.5In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the fCVE-2023-23116.5Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem reCVE-2023-231107.4An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware iCVE-2023-231195.9The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmwarCVE-2023-23128.8Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer proc