CVSS 3.1 Score 9.8 of 10 (high)


Published Dec 26, 2023
Updated: Dec 30, 2023


CVE-2023-51099 is a command injection vulnerability discovered in Tenda W9 V1.0.0.7(4456)_CN. The affected product is the Tenda W9 router with version The vulnerability allows an attacker to inject malicious commands through the function formexeCommand, posing a high risk to the organization's integrity and confidentiality. The base severity of this vulnerability is classified as critical, with a base score of 9.8 out of 10 according to NIST's National Vulnerability Database (NVD). It requires no privileges and no user interaction for exploitation, and the attack vector is through the network. Remediation steps are not provided in the available information, but organizations using this product should monitor for updates or patches from Tenda to mitigate the vulnerability effectively.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-51099 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options