Vulnerability Intelligence Report
CVE-2023-23080
Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:2.46%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| tenda | it7-lcs_firmware | all |
| tenda | it7-lcs | all |
| tenda | it7-pcs_firmware | all |
| tenda | it7-pcs | all |
| tenda | it7-prs_firmware | all |
| tenda | it7-prs | all |
| tenda | cp3_firmware | all |
| tenda | cp3 | all |
| tenda | cp7_firmware | all |
| tenda | cp7 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.456%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2023-01-11T00:00:00 |
| Published | 2023-02-27T00:00:00 |
| Last Updated | 2025-03-11T14:01:45 |
Community Chatter & Buzz