CVE-2021-27706

CVE-2021-27706 affects Tenda G1 and G3 routers. A buffer overflow in the IPMacBindIndex handling within the formIPMacBindDel path allows remote attackers to execute arbitrary code, via a crafted action/IPMacBindIndex request, because the parameter is passed to strcpy without bounds checking. This...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...

CVE-2021-27705

The CVE-2021-27705 entry involves the Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN, where a buffer overflow in the formQOSRuleDel routine exists. Specifically, the function passes the qosIndex parameter directly to strcpy without bounds checking, enabling remote code execution. Mult...

PT-2021-17609

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version V15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex" request. This occurs because the formIPMacBindDel function directly passes the...

PT-2021-17608

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version v15.11.0.179502 CN Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted action/"qosIndex " request. This occurs because the formQOSRuleDel function directly passe...

PT-2021-17610

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version v15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex" request. This occurs because the formDelPortMapping function directly passes t...

CVE-2021-27705: Buffer Copy without Checking Size of Input

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...

CVE-2021-27707: Buffer Copy without Checking Size of Input

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...

Tenda G1 and G3 安全漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...

CVE-2021-27706: Buffer Copy without Checking Size of Input

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...

Command Execution Vulnerability in Tenda G3 Router of Shenzhen Jixiang Tenda Technology Co.

Tenda G3 Road is an enterprise-class AP management router with 200 users, providing efficient, secure and easily scalable networks for small and medium-sized businesses, restaurants and hotel chains. Shenzhen Jixiang Tenda Technology Co., Ltd Tenda G3 router has a command execution vulnerability...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

Code injection

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

LG PC Suite for LG G3 and earlier (LG PC Suite v5.3.27 and earlier) is affected by a DLL Hijacking flaw where a Trojan DLL in the current working directory can be loaded. LG ID: LVE-MOT-190001. Root cause and impact are described in CVE-2019-20769; no remediation details are provided in the suppl...

CVE-2019-20769: Uncontrolled Search Path Element

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

PT-2020-7315

Name of the Vulnerable Software and Affected Versions: Polycom Web Management Interface G3/HDX 8000 HD with Durango version 2.6.0 4740 Polycom Linux Development Platform version 2.14.g3 Description: The issue is related to a default blank administrative password in the Polycom Web Management...

CVE-2012-6611: Use of Hard-coded Credentials

An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password...

CVE-2019-15379

The Walton Primo G3 Android device with a build fingerprint of WALTON/PrimoGM3/PrimoGM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify ...