CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...

PT-2021-17604

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers versions v15.11.0.179502 CN through v15.11.0.179502 CN Tenda G1 and G3 routers version v15.11.0.169024 CN Description: The issue allows remote attackers to execute arbitrary OS commands via a crafted...

CVE-2021-27692: Improper Neutralization of Special Elements used in an OS Command

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...