VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 14, 2021· Updated Jun 17, 2026

CVE-2021-27705

CVE-2021-27705

Description

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit.

Affected products

5
  • Tenda/G1 Firmware
    cpe:2.3:o:tenda:g1_firmware:v15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*
  • Tenda/G3 Firmware
    cpe:2.3:o:tenda:g3_firmware:v15.11.0.17\(9502\)_cn:*:*:*:*:*:*:*
  • Tenda/G1 and G3 routersdescription
  • Tenda/G3llm-fuzzy
    Range: 15.11.0.17(9502)_CN
  • Tenda/G1llm-fuzzy
    Range: 15.11.0.17(9502)_CN

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.