VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 16, 2021· Updated Jun 17, 2026

CVE-2021-27692

CVE-2021-27692

Description

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the "doSystemCmd" function with untrusted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Tenda/G1 Firmware2 versions
    cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*
    • cpe:2.3:o:tendacn:g1_firmware:15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*
  • Tenda/G3 Firmware2 versions
    cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\(9024\)_cn:*:*:*:*:*:*:*
    • cpe:2.3:o:tendacn:g3_firmware:15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*
  • Tenda/G1 and G3 routersdescription
  • Tenda/G3llm-fuzzy
    Range: = v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN
  • Tenda/G1llm-fuzzy
    Range: = v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.