A vulnerability has been found in Tenda AX12 22.03.01.46 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to command injection.
This vulnerability is known as CVE-2023-49428. The attack can only be done within the local network. There is no exploit available.