Tendacn G3 vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Tendacn G3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-24171tendacng1_firmware+1
EPSS score2.96%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.CVE-2022-24169tendacng1_firmware+1EPSS score1.18%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.CVE-2022-24168tendacng1_firmware+1EPSS score2.96%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.CVE-2024-46628tendacng3_firmwareEPSS score11.67%
Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.CVE-2024-8224tendag3_firmware+1EPSS score1.21%
A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.CVE-2024-50852tendacng3_firmwareEPSS score1.70%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.CVE-2024-50854tendacng3_firmwareEPSS score0.55%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.CVE-2024-50853tendacng3_firmwareEPSS score1.70%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.