Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRuleIP and IPMacBindRuleMac parameters...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service DoS via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExtern...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service DoS via the qosGuestUpstream and qosGuestDownstream parameters...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter...

Command injection

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service DoS via the addDhcpRules parameter...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service DoS via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

Stack overflow

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service DoS via the IPMacBindRule parameter...

CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...

CVE-2021-45986

CVE-2021-45986 affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). The issue is a command-injection vulnerability in the function formSetUSBShareInfo, exploitable via the usbOrdinaryUserName parameter to execute arbitrary commands. Public sources describe a high/critical-impact risk (NVD CVSS...

CVE-2021-45987

CVE-2021-45987 affects Tenda G1/G3 routers (firmware ~15.11.0.17(9502)_CN). The vulnerability is a command-injection in function formSetNetCheckTools, allowing arbitrary command execution via the hostName parameter. NVD CVSS v2 base 7.5 (Network, Low complexity, None auth, Partial CIA/P,I,A) and ...

CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service DoS via the DnsForwardRule parameter...

CVE-2021-45988

CVE-2021-45988 affects Tenda G1 and G3 routers (firmware v15.11.0.17(9502)_CN). The root cause is a stack overflow in the function formAddDnsForward, enabling a Denial of Service via the DnsForwardRule parameter. Documented sources (NVD, CNVD/CNNVD, CVE lists) confirm the vulnerable component and...

CVE-2021-45990

The CVE-2021-45990 entry concerns Tenda G1 and G3 routers (firmware version v15.11.0.17(9502)_CN ). A command injection vulnerability exists in the function uploadPicture , exploitable via the pic_name parameter to execute arbitrary commands. This is described in the NVD/CVE records with high/cri...

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter...

CVE-2021-45989

The CVE-2021-45989 entry affects Tenda G1 and G3 routers (version v15.11.0.17(9502)_CN) with a stack/buffer overflow in the guestWifiRuleRefresh function. The flaw can be exploited to cause a Denial of Service via the qosGuestUpstream and qosGuestDownstream parameters. Documents consistently desc...

CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service DoS via the vpnUsers parameter...

CVE-2021-45991

The CVE-2021-45991 entry affects Tenda G1 and G3 routers (v15.11.0.17(9502)_CN). A stack overflow in the function formAddVpnUsers is described, enabling a Denial of Service via the vpnUsers parameter. Across CNVD/CNNVD and related records, there is no detail on a vendor patch/version, mitigation,...