Tenda G3 缓冲区错误漏洞

Tenda G3 is a Qos Vpn router from Tenda China. The Tenda G3 suffers from a buffer overflow vulnerability that originates from the formSetPortMapping function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the system or cau...

CVE-2024-50854

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function...

Tenda G3 命令注入漏洞

Tenda G3 is a Qos Vpn router from Tenda China. Tenda G3 suffers from a command injection vulnerability, which stems from the formSetDebugCfg function failing to properly filter constructor command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary commands...

Tenda G3 命令注入漏洞

Tenda G3 is a Qos Vpn router from Tenda China. Tenda G3 suffers from a command injection vulnerability, which stems from the formSetUSBPartitionUmount function failing to properly filter constructor command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary...

CVE-2024-50853

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function...

CVE-2024-50852

CVE-2024-50852 affects Tenda G3, version 3.0 v15.11.0.20. The vulnerability is a command injection in the formSetUSBPartitionUmount function, arising because usbPartitionName handling fails to neutralize special characters/commands. Impact: allows a remote attacker to execute arbitrary commands. ...

CVE-2024-50853

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function...

CVE-2024-50852

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function...

CVE-2024-50852

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function...

CVE-2024-50854

CVE-2024-50854 (Tenda G3) affects Tenda G3 version 3.0 and v15.11.0.20. The vulnerability is a stack/buffer overflow in the formSetPortMapping function caused by improper handling of input/parameters (e.g., pPortMapIndex, pLanIP, pProtocl, pWanid). This can allow a remote attacker to execute arbi...

CVE-2024-50853

CVE-2024-50853 affects Tenda G3 firmware (version 3.0, v15.11.0.20). The vulnerability is a command injection in the formSetDebugCfg function caused by improper filtering of parameters (enable, level, module). Exploitation may allow an attacker to execute arbitrary commands via a crafted POST req...

Tenda G3 Hardcoded Credentials Vulnerability

Tenda G3 is a QosVpn router from Tenda China. The Tenda G3 suffers from a hard-coded credential vulnerability that can be exploited by an attacker to log in as root and obtain sensitive information...

The vulnerability of the formSetUSBPartitionUmount function in the wireless access point software Tenda G3 allows a intruder to execute arbitrary code.

The vulnerability of the formSetUSBPartitionUmount function in the wireless access point software Tenda G3 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-48192

Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

CVE-2024-48192

Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

CVE-2024-48192

Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

CVE-2024-48192

Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

Tenda G3 安全漏洞

Tenda G3 is a QosVpn router from Tenda China. The Tenda G3 suffers from a hard-coded credential vulnerability that can be exploited by an attacker to log in as root and obtain sensitive information...

PT-2024-33017 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.01.0.52848 755 EN Description: A hardcoded password vulnerability was discovered in the /etc ro/shadow file, which allows attackers to log in as root. This issue exists in the Tenda G3 firmware, specifically affecting the...

CVE-2024-48192

CVE-2024-48192 affects Tenda G3 firmware v15.01.0.5(2848_755)_EN. A hardcoded password in the /etc_ro/shadow file allows an attacker to log in as root. The entry lists a high severity (CVSSv3.1: AV Adjacent, AC Low, PR Low, UI None, S Unchanged, C/H/I/A High) with a potential total impact. No rem...