Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service DoS via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter...

CVE-2021-45986

CVE-2021-45986 affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). The issue is a command-injection vulnerability in the function formSetUSBShareInfo, exploitable via the usbOrdinaryUserName parameter to execute arbitrary commands. Public sources describe a high/critical-impact risk (NVD CVSS...

CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...

CVE-2021-45987

CVE-2021-45987 affects Tenda G1/G3 routers (firmware ~15.11.0.17(9502)_CN). The vulnerability is a command-injection in function formSetNetCheckTools, allowing arbitrary command execution via the hostName parameter. NVD CVSS v2 base 7.5 (Network, Low complexity, None auth, Partial CIA/P,I,A) and ...

CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsForwardRule parameter...

CVE-2021-45988

CVE-2021-45988 affects Tenda G1 and G3 routers (firmware v15.11.0.17(9502)_CN). The root cause is a stack overflow in the function formAddDnsForward, enabling a Denial of Service via the DnsForwardRule parameter. Documented sources (NVD, CNVD/CNNVD, CVE lists) confirm the vulnerable component and...

CVE-2021-45989

The CVE-2021-45989 entry affects Tenda G1 and G3 routers (version v15.11.0.17(9502)_CN) with a stack/buffer overflow in the guestWifiRuleRefresh function. The flaw can be exploited to cause a Denial of Service via the qosGuestUpstream and qosGuestDownstream parameters. Documents consistently desc...

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45990

The CVE-2021-45990 entry concerns Tenda G1 and G3 routers (firmware version v15.11.0.17(9502)_CN ). A command injection vulnerability exists in the function uploadPicture , exploitable via the pic_name parameter to execute arbitrary commands. This is described in the NVD/CVE records with high/cri...

CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

CVE-2021-45991

The CVE-2021-45991 entry affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). A stack overflow in the function formAddVpnUsers is described, enabling a Denial of Service via the vpnUsers parameter. Across CNVD/CNNVD and related records, there is no detail on a vendor patch/version, mitigation,...

CVE-2021-45994

The vulnerability CVE-2021-45994 affects Tenda G1 and G3 routers, specifically v15.11.0.17(9502)_CN. A stack overflow occurs in the function formDelDhcpRule, which can be triggered by the delDhcpIndex parameter to cause a Denial of Service. This is documented across multiple sources (CVE/NVD entr...

CVE-2021-45993

CVE-2021-45993 affects Tenda routers G1 and G3 (version v15.11.0.17(9502)_CN). The vulnerability is a stack overflow in the function formIPMacBindModify , enabling a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters. This is a network‑proximate issue with a CVSS v3.1...

CVE-2021-45994

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service DoS via the delDhcpIndex parameter...

CVE-2021-45995

The CVE-2021-45995 entry concerns Tenda G1 and G3 routers. Reports across multiple connected documents identify a stack/ buffer overflow in the function formSetStaticRoute, enabling a Denial of Service via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters. Affected products a...

CVE-2021-45995

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service DoS via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...

CVE-2021-45997

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

CVE-2022-24164

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsHijackRule parameter...