VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 16, 2021· Updated Jun 17, 2026

CVE-2021-27691

CVE-2021-27691

Description

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This occurs because the "formSetDebugCfg" function executes glibc's system function with untrusted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Tenda/G0llm-fuzzy
    Range: v15.11.0.6(9039)_CN, v15.11.0.5(5876)_CN
  • Tenda/G1llm-fuzzy
    Range: v15.11.0.17(9502)_CN, v15.11.0.16(9024)_CN
  • Tenda/G3llm-fuzzy
    Range: v15.11.0.17(9502)_CN, v15.11.0.16(9024)_CN
  • Tenda/G0 routersdescription
  • Tenda/G0 Firmware2 versions
    cpe:2.3:o:tendacn:g0_firmware:15.11.0.5\(5876\)_cn:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tendacn:g0_firmware:15.11.0.5\(5876\)_cn:*:*:*:*:*:*:*
    • cpe:2.3:o:tendacn:g0_firmware:15.11.0.6\(9039\)_cn:*:*:*:*:*:*:*
  • Tenda/G1 Firmware2 versions
    cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*
    • cpe:2.3:o:tendacn:g1_firmware:15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*
  • Tenda/G3 Firmware2 versions
    cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*
    • cpe:2.3:o:tendacn:g3_firmware:15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.