CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

CVE-2021-45987

CVE-2021-45987 affects Tenda G1/G3 routers (firmware ~15.11.0.17(9502)_CN). The vulnerability is a command-injection in function formSetNetCheckTools, allowing arbitrary command execution via the hostName parameter. NVD CVSS v2 base 7.5 (Network, Low complexity, None auth, Partial CIA/P,I,A) and ...