VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 16, 2021· Updated Jun 17, 2026

CVE-2021-27691

CVE-2021-27691

Description

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This occurs because the "formSetDebugCfg" function executes glibc's system function with untrusted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Tenda/G0 routersdescription
  • Tenda/G0llm-fuzzy
    Range: v15.11.0.6(9039)_CN, v15.11.0.5(5876)_CN
  • Tenda/G3llm-fuzzy
    Range: v15.11.0.17(9502)_CN, v15.11.0.16(9024)_CN
  • Tenda/G1llm-fuzzy
    Range: v15.11.0.17(9502)_CN, v15.11.0.16(9024)_CN

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.