CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45990

The CVE-2021-45990 entry concerns Tenda G1 and G3 routers (firmware version v15.11.0.17(9502)_CN ). A command injection vulnerability exists in the function uploadPicture , exploitable via the pic_name parameter to execute arbitrary commands. This is described in the NVD/CVE records with high/cri...

CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

CVE-2021-45991

The CVE-2021-45991 entry affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). A stack overflow in the function formAddVpnUsers is described, enabling a Denial of Service via the vpnUsers parameter. Across CNVD/CNNVD and related records, there is no detail on a vendor patch/version, mitigation,...

CVE-2021-45994

The vulnerability CVE-2021-45994 affects Tenda G1 and G3 routers, specifically v15.11.0.17(9502)_CN. A stack overflow occurs in the function formDelDhcpRule, which can be triggered by the delDhcpIndex parameter to cause a Denial of Service. This is documented across multiple sources (CVE/NVD entr...

CVE-2021-45994

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service DoS via the delDhcpIndex parameter...

CVE-2021-45993

CVE-2021-45993 affects Tenda routers G1 and G3 (version v15.11.0.17(9502)_CN). The vulnerability is a stack overflow in the function formIPMacBindModify , enabling a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters. This is a network‑proximate issue with a CVSS v3.1...

CVE-2021-45995

The CVE-2021-45995 entry concerns Tenda G1 and G3 routers. Reports across multiple connected documents identify a stack/ buffer overflow in the function formSetStaticRoute, enabling a Denial of Service via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters. Affected products a...

CVE-2021-45995

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service DoS via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...

CVE-2021-45997

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

CVE-2022-24164

CVE-2022-24164 affects Tenda G1 and G3 routers running v15.11.0.17(9502)_CN. The vulnerability is a stack overflow in the function formSetVirtualSer, which can be exploited to cause a Denial of Service via the DnsHijackRule parameter. Affected product and root cause are consistently described acr...

CVE-2022-24164

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsHijackRule parameter...

CVE-2022-24165

CVE-2022-24165 is linked to Tenda G1/G3 routers (firmware v15.11.0.17(9502)_CN). Multiple connected sources confirm a command injection vulnerability in function formSetQvlanList, exploitable via qvlanIP to execute arbitrary commands. Reported CVSS details indicate high/critical impact (CVSS 3.1:...

CVE-2022-24167

CVE-2022-24167 affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). The vulnerability is a command injection in the formSetDMZ function, exploitable via the dmzHost1 parameter to execute arbitrary commands. Impact is consistent with a high/severe condition per accompanying CVSS data (network-b...

CVE-2022-24169

CVE-2022-24169 concerns Tenda routers G1 and G3 (version v15.11.0.17(9502)_CN). The issue is a stack overflow in the function formIPMacBindAdd, leading to a Denial of Service via the IPMacBindRule parameter. Multiple sources (NVD, CNVD, Red Hat, CVE list, CNNNVD) corroborate the DoS impact on the...

CVE-2022-24168

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters...

CVE-2022-24170

CVE-2022-24170 affects Tenda G1 and G3 routers with version 15.11.0.17(9502)_CN. The vulnerability is a command injection in the function formSetIpSecTunnel, allowing an attacker to execute arbitrary commands through the IPsecLocalNet and IPsecRemoteNet parameters. The available connected sources...

CVE-2022-24171

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters...

CVE-2022-24171

The CVE-2022-24171 entry concerns Tenda routers G1 and G3 (version 15.11.0.17(9502)_CN). A command injection vulnerability exists in the formSetPppoeServer function, allowing an attacker to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters. Docu...

CVE-2022-24172

CVE-2022-24172 affects Tenda G1/G3 routers (v15.11.0.17(9502)_CN). The issue is a stack overflow in the formAddDhcpBindRule function, exploitable by sending crafted addDhcpRules input, leading to a Denial of Service over the network. No affected product list beyond the G1/G3 line is stated; CVSS ...