CRITICAL🇵🇱 Wersja polska

CVE-2023-30353

CVSS 9.8v3.1pub. 2023-05-10upd. 2025-01-27

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tenda Cp3

    HW
    Tenda
    all versions

  • Tenda Cp3 Firmware

    OS
    Tenda
    11.10.00.2211041355
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-30352CRITICAL9.8PL ✓same product

Tenda CP3: Hardkodowane hasło dostępu do strumienia RTSP

CVE-2023-30354CRITICAL9.8PL ✓same product

Tenda IP Camera CP3 — ujawnienie hasła Wi-Fi i hardcoded hasło bootloadera przez UART

CVE-2023-23080CRITICAL9.8PL ✓same product

Command injection w urządzeniach Tenda CP/IT7 — nieautoryzowane wykonanie poleceń

CVE-2023-30351HIGH7.5same product

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default pas...

CVE-2023-30356HIGH7.5same product

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows a...