Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TendacnG3 Firmware

28 matches found

CVE
CVE•added 2021/04/16 12:15 a.m.•74 views

CVE-2021-27691

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg reques...

10CVSS9.8AI score0.03498EPSS
CVE
CVE•added 2021/04/16 12:15 a.m.•68 views

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the "doS...

10CVSS9.8AI score0.02577EPSS
CVE
CVE•added 2024/11/13 3:15 p.m.•68 views

CVE-2024-50852

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.

8.8CVSS8.2AI score0.07528EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•54 views

CVE-2022-24170

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.

9.8CVSS10AI score0.16002EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•52 views

CVE-2022-24167

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.

9.8CVSS10AI score0.04477EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•50 views

CVE-2021-45996

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExt...

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•48 views

CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.

9.8CVSS10AI score0.02149EPSS
CVE
CVE•added 2024/11/13 3:15 p.m.•48 views

CVE-2024-50854

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.

8.8CVSS8.1AI score0.00155EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2021-45989

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream parameters.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2021-45993

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2022-24165

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter.

9.8CVSS10AI score0.16002EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2022-24168

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.

9.8CVSS10AI score0.04477EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2022-24172

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•45 views

CVE-2021-45994

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the delDhcpIndex parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•45 views

CVE-2021-45995

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service (DoS) via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•45 views

CVE-2022-24164

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•44 views

CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.

9.8CVSS10AI score0.02149EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•44 views

CVE-2021-45992

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qvlanName parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•44 views

CVE-2022-24166

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2024/08/27 11:15 p.m.•44 views

CVE-2024-8224

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotely....

9.8CVSS8.8AI score0.00435EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•43 views

CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the pic_name parameter.

9.8CVSS10AI score0.02149EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•43 views

CVE-2021-45997

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExt...

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•43 views

CVE-2022-24169

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2024/11/13 3:15 p.m.•43 views

CVE-2024-50853

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.

8.8CVSS8.2AI score0.08575EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•42 views

CVE-2022-24171

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.

9.8CVSS10AI score0.16002EPSS
CVE
CVE•added 2024/09/26 8:15 p.m.•42 views

CVE-2024-46628

Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.

9.8CVSS8.1AI score0.08295EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•41 views

CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the vpnUsers parameter.

7.8CVSS7.6AI score0.00328EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•39 views

CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter.

7.8CVSS7.6AI score0.00328EPSS