A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456)_CN. Affected is the function formGetDiagnoseInfo. The manipulation leads to command injection.

This vulnerability is traded as CVE-2023-51100. The attack needs to be approached within the local network. There is no exploit available.