CVE-2021-45986: Improper Neutralization of Special Elements used in an OS Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...

CVE-2021-45987: Improper Neutralization of Special Elements used in an OS Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

CVE-2021-45990: Improper Neutralization of Special Elements used in a Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45989: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service DoS via the qosGuestUpstream and qosGuestDownstream parameters...

CVE-2021-45991: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

CVE-2021-45994: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service DoS via the delDhcpIndex parameter...

CVE-2021-45993: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRuleIP and IPMacBindRuleMac parameters...

CVE-2021-45996: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

CVE-2021-45995: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service DoS via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...

CVE-2021-45997: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

CVE-2022-24164: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsHijackRule parameter...

CVE-2022-24167: Improper Neutralization of Special Elements used in a Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter...

CVE-2022-24169: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRule parameter...

CVE-2022-24170: Improper Neutralization of Special Elements used in a Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...

CVE-2022-24168: Improper Neutralization of Special Elements used in a Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters...

CVE-2022-24171: Improper Neutralization of Special Elements used in a Command

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters...

CVE-2022-24172: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service DoS via the addDhcpRules parameter...

CVE-2021-45992: Out-of-bounds Write

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service DoS via the qvlanName parameter...

Tenda G1 and G3 缓冲区错误漏洞

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3, which can be exploited by an attacker to cause a denial of service via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and...

Tenda G1 and G3 缓冲区错误漏洞

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3, which can be exploited by an attacker to cause a denial of service via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and...