EUVD-2021-32697

Malicious code in bioql PyPI...

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-16169)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3, which can be exploited by an attacker to cause a denial of service via the delDhcpIndex parameter...

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-16179)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3, which can be exploited by an attacker to cause a denial of service via the manualTime parameter...

Tenda G1 and G3 Command Injection Vulnerability (CNVD-2022-10749)

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 v15.11.0.179502CN is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters...

CVE-2022-24172

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service DoS via the addDhcpRules parameter...

CVE-2022-24166

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the manualTime parameter...

CVE-2021-45992

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service DoS via the qvlanName parameter...

CVE-2021-45996

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter...

CVE-2021-45993

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRuleIP and IPMacBindRuleMac parameters...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRule parameter...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter...

CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsForwardRule parameter...

Tenda G1 and G3 命令注入漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 v15.11.0.179502CN is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters...

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...