← Back

G3 Firmware

g3_firmware

Vendor: Tenda • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36584
1Tenda
1G3 Firmware
Nov 21, 2024
Sep 6, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
CVE-2021-27707
1Tenda
2G1 Firmware
G3 Firmware
Nov 21, 2024
Apr 14, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping...Show more
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without limit.Show less
CVE-2021-27706
1Tenda
2G1 Firmware
G3 Firmware
Nov 21, 2024
Apr 14, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBin...Show more
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without limit.Show less
CVE-2021-27705
1Tenda
2G1 Firmware
G3 Firmware
Nov 21, 2024
Apr 14, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function d...Show more
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit.Show less