CVE-2021-27707

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...

CVE-2021-27707

CVE-2021-27707 affects Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN. The issue is a buffer overflow in the port mapping feature: the function formDelPortMapping directly passes the parameter portMappingIndex to strcpy without bounds checking, enabling arbitrary code execution via a ...