Dashboard / CVE-2023-23080

CVE-2023-23080

CRITICAL
INFO Priority: 0.24 BB Relevance: 80/100
Published: 2023-02-27 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
tenda cp3_firmware < 20220906024_2025
tenda cp7_firmware < 1.10.00.2211041403
tenda it7-lcs_firmware < 2209020914
tenda it7-pcs_firmware < 2209020914
tenda it7-prs_firmware < 2209020908

References & Advisories (1)

Bug Bounty Relevance

80 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

2.46%
Raw Score 0.024560
Percentile 84.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.02456
2026-10-28
0.02456

Intelligence Sources

nvd ref →

External Links