CVE-2023-23080

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-25)

CWE

CWE-77

Published

2023-02-27

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

Affected

• tenda:cp3_firmware
• tenda:cp7_firmware
• tenda:it7-lcs_firmware
• tenda:it7-pcs_firmware
• tenda:it7-prs_firmware

References

• https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC
• https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC

Check your stackJSON