Tenda CP3 Command Injection Vulnerability Allowing Remote Code Execution

A critical command injection vulnerability has been identified in the Tenda CP3 camera firmware version 11.10.00.2311090948. The issue arises in the 'sub_F3C8C' function of the 'apollo' file, where user-supplied input is not properly sanitized before being executed as a command. This vulnerability allows for arbitrary command execution with root privileges, exploiting the camera's Wi-Fi connection by manipulating the SSID. The vulnerability can be exploited remotely, requiring authenticated access.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device with root privileges.

Reproduction

To reproduce this vulnerability, change the Wi-Fi SSID to include a crafted payload that exploits the command injection flaw. The payload is executed through the camera's connection to Wi-Fi, taking advantage of the unsanitized input in the 'sub_F3C8C' function.