A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456)_CN. Affected is the function
formGetDiagnoseInfo
. The manipulation leads to command injection.
This vulnerability is traded as CVE-2023-51100. The attack needs to be approached within the local network. There is no exploit available.