CVE-2023-50989
published 2023-12-20CVE-2023-50989: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.02%
80.8th percentile
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | i29_firmware | — | — |
| tenda | i29_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Tenda i29 1.0.0.5 pingSet command injection
vuldb·2026-07-10·CVSS 9.8
CVE-2023-50989 [CRITICAL] Tenda i29 1.0.0.5 pingSet command injection
A vulnerability was found in Tenda i29 1.0.0.5. It has been classified as critical. This vulnerability affects the function pingSet. The manipulation leads to command injection.
This vulnerability is listed as CVE-2023-50989. The attack must be carried out from within the local network. There is no available exploit.
GHSA
GHSA-q7xw-xqp3-xj7j: Tenda i29 v1
ghsa_unreviewed·2023-12-21
CVE-2023-50989 [CRITICAL] CWE-77 GHSA-q7xw-xqp3-xj7j: Tenda i29 v1
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-12-20
Published