Tenda AC7 Command Injection Vulnerability in Telnet Function

A critical command injection vulnerability has been identified in the Tenda AC7 1200M router, specifically in version 15.03.06.44. The issue arises in the 'TendaTelnet' function within the '/goform/telnet' file, where improper handling of the 'lan_ip' argument allows for operating system command injection. This vulnerability can be exploited remotely.

Impact

Successful exploitation allows for arbitrary command execution on the device's operating system.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/telnet' endpoint with a crafted 'lan_ip' argument that includes malicious payloads designed to be executed as operating system commands. The injection point is the 'TendaTelnet' function, which processes the 'lan_ip' argument without proper validation or sanitization, allowing for command injection.