CVE-2021-27691

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

Tenda G0 Routers Command Injection (CVE-2021-27691)

A command injection vulnerability exists in Tenda G0 Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-27691

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

CVE-2021-27691

CVE-2021-27691 affects Tenda G0 routers (firmware v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN) and Tenda G1/G3 (firmware v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN). The issue arises from the formSetDebugCfg function calling glibc’s system with untrusted input, enabling remote command execution...