VYPR

G3

by Tenda

CVEs (46)

  • CVE-2021-27691CriApr 16, 2021
    Tenda
    G0
    risk 0.66cvss 9.8epss 0.25

    Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted…

  • CVE-2022-36586CriSep 8, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.01

    In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.

  • CVE-2022-36585CriSep 7, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.01

    In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.

  • CVE-2022-36587CriSep 7, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.01

    In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.

  • CVE-2022-36584CriSep 6, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.01

    In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.

  • CVE-2022-24171CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP…

  • CVE-2022-24170CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.

  • CVE-2022-24168CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.

  • CVE-2022-24167CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.

  • CVE-2021-45987CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.02

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.

  • CVE-2021-45986CriFeb 4, 2022
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.02

    Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.

  • CVE-2021-27692CriApr 16, 2021
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount"…

  • CVE-2021-27707CriApr 14, 2021
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex"…

  • CVE-2021-27706CriApr 14, 2021
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter…

  • CVE-2021-27705CriApr 14, 2021
    Tenda
    G3
    risk 0.64cvss 9.8epss 0.03

    Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without…

  • CVE-2024-50854HigNov 13, 2024
    Tenda
    G3
    risk 0.57cvss 8.8epss 0.01

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.

  • CVE-2024-50853HigNov 13, 2024
    Tenda
    G3
    risk 0.57cvss 8.8epss 0.02

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.

  • CVE-2024-50852HigNov 13, 2024
    Tenda
    G3
    risk 0.57cvss 8.8epss 0.02

    Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.

  • CVE-2024-8225HigAug 27, 2024
    Tenda
    G3
    risk 0.57cvss 8.8epss 0.01

    A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the…

  • CVE-2024-8224HigAug 27, 2024
    Tenda
    G3
    risk 0.57cvss 8.8epss 0.01

    A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be…

Page 1 of 3