Tenda O3V2 OS Command Injection Vulnerability

A critical OS command injection vulnerability has been identified in the Tenda O3V2 router, specifically in version 1.0.0.12(3880). The issue arises in the httpd component, within the function fromNetToolGet of the file /goform/setPingInfo. The vulnerability allows remote attackers to execute arbitrary operating system commands by manipulating the domain argument.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted request to the Tenda O3V2 router's /goform/setPingInfo endpoint. The request must include a manipulated domain argument that exploits the command injection flaw. This can be done remotely.