Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TendaG3 Firmware

13 matches found

CVE
CVE•added 2022/09/07 11:15 p.m.•53 views

CVE-2022-36585

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.

9.8CVSS9.6AI score0.00473EPSS
CVE
CVE•added 2022/09/06 5:15 p.m.•50 views

CVE-2022-36584

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.

9.8CVSS9.6AI score0.00473EPSS
CVE
CVE•added 2024/04/25 12:15 p.m.•47 views

CVE-2024-4165

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file /goform/modifyDhcpRule. The manipulation of the argument bindDhcpIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. T...

9.8CVSS6.9AI score0.00327EPSS
CVE
CVE•added 2022/09/08 12:15 a.m.•45 views

CVE-2022-36586

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.

9.8CVSS9.6AI score0.00473EPSS
CVE
CVE•added 2022/09/07 5:15 p.m.•45 views

CVE-2022-36587

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.

9.8CVSS9.6AI score0.00473EPSS
CVE
CVE•added 2024/08/27 11:15 p.m.•44 views

CVE-2024-8224

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotely....

9.8CVSS8.8AI score0.00435EPSS
CVE
CVE•added 2024/08/27 11:15 p.m.•43 views

CVE-2024-8225

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The expl...

9.8CVSS8.9AI score0.00458EPSS
CVE
CVE•added 2024/04/25 11:15 a.m.•42 views

CVE-2024-4164

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of the file /goform/ModifyPppAuthWhiteMac. The manipulation of the argument pppoeServerWhiteMacIndex leads to stack-based buffer overflow. The at...

9.8CVSS6.9AI score0.00396EPSS
CVE
CVE•added 2024/09/26 8:15 p.m.•42 views

CVE-2024-46628

Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.

9.8CVSS8.1AI score0.0789EPSS
CVE
CVE•added 2021/04/14 3:15 p.m.•39 views

CVE-2021-27706

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...

9.8CVSS9.6AI score0.03106EPSS
CVE
CVE•added 2021/04/14 3:15 p.m.•38 views

CVE-2021-27707

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without l...

9.8CVSS9.6AI score0.03106EPSS
CVE
CVE•added 2024/10/17 5:15 p.m.•36 views

CVE-2024-48192

Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root

8CVSS7.5AI score0.00071EPSS
CVE
CVE•added 2021/04/14 3:15 p.m.•35 views

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit.

9.8CVSS9.5AI score0.03106EPSS