Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.