CVE-2023-33530

8.8 highEPSS 1.2%

High (8.8) in tenda g103 firmware. EPSS 1.2% chance of exploitation in the next 30 days.

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2023-06-06
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

tenda:g103_firmware

References

https://github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf
https://github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf

Check your stack JSON