Tenda

G1 Firmware

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.4

CVE-2025-70802

Exploit
  • EPSS 0.02%
  • Veröffentlicht 10.03.2026 00:00:00
  • Zuletzt bearbeitet 09.04.2026 20:27:54

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

6.6

CVE-2025-8980

Exploit
  • EPSS 0.09%
  • Veröffentlicht 14.08.2025 19:32:10
  • Zuletzt bearbeitet 18.08.2025 15:04:02

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the function check_upload_file of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be...

9.8

CVE-2021-27706

Exploit
  • EPSS 3.11%
  • Veröffentlicht 14.04.2021 15:15:14
  • Zuletzt bearbeitet 21.11.2024 05:58:27

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes...

9.8

CVE-2021-27707

Exploit
  • EPSS 3.11%
  • Veröffentlicht 14.04.2021 15:15:14
  • Zuletzt bearbeitet 21.11.2024 05:58:27

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the...

9.8

CVE-2021-27705

Exploit
  • EPSS 3.11%
  • Veröffentlicht 14.04.2021 15:15:13
  • Zuletzt bearbeitet 21.11.2024 05:58:27

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "...