Tenda G3 security vulnerabilities

Tenda G3 is a Qos Vpn router from Tenda China. A buffer overflow vulnerability exists in Tenda G3 v3.0brV15.11.0.17, which originates from the delDhcpIndex parameter in the formDelDhcpRule function that fails to properly validate the length of the input data, and can be exploited by an attacker t...

Tenda W15E formDelDhcpRule XSS

The vulnerability of the formDelDhcpRule function /goform/DelDhcpRule in the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing the delDhcpIndex parameter. Exploiting this vulnerability could allow an attacker to compromise the...