← Back to browse · API

CVE-2022-45506

Severity

CRITICAL

CVSS

9.8

EPSS

0.02461

Risk score

40.06

CISA KEV

No

PoC

No

Published

2022-12-08

Modified

2025-04-23

First seen

2026-08-07

Aliases

EUVD-2022-48372, GHSA-GFCG-5W9F-H7J7

Products

n/a:n/a n/a

Sources

euvd EUVD-2022-48372

Description

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.

References