CVE-2021-27706

🗓️ 14 Apr 2021 15:14:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 34 Views🌐 WEB

Buffer Overflow in Tenda G1 and G3 routers allows remote code execution via crafted action

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2021-27706	14 Apr 202115:15	–	nvd
CNVD	Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-10754)	6 May 202100:00	–	cnvd
Cvelist	CVE-2021-27706	14 Apr 202114:55	–	cvelist
Prion	Buffer overflow	14 Apr 202115:15	–	prion

Nvd

Node

tenda g1_firmwareMatchv15.11.0.17(9502)_cn

AND

tenda g1Match-

Node

tenda g3_firmwareMatchv15.11.0.17(9502)_cn

AND

tenda g3Match-

Source	Link
hackmd	www.hackmd.io/BhzJ4H20TjqKUiBrDOIKaw

Parameter	Position	Path	Description	CWE
IPMacBindIndex	request body	/action/IPMacBindIndex	Buffer Overflow vulnerability in Tenda G1 and G3 routers that allows remote attackers to execute arbitrary code.	CWE-120

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Apr 2021 15:15Current

9.6High risk

Vulners AI Score9.6

CVSS27.5

CVSS39.8

EPSS0.02585

CWE-120