Tenda

G3 Firmware

23 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-57061

Exploit
  • EPSS 0.1%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 15.09.2025 18:14:31

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted...

7.5

CVE-2025-57059

Exploit
  • EPSS 0.1%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 15.09.2025 18:14:18

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

7.5

CVE-2025-57057

Exploit
  • EPSS 0.1%
  • Veröffentlicht 09.09.2025 00:00:00
  • Zuletzt bearbeitet 15.09.2025 18:13:34

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

8

CVE-2024-48192

Exploit
  • EPSS 0.13%
  • Veröffentlicht 17.10.2024 17:15:12
  • Zuletzt bearbeitet 07.07.2025 16:20:38

Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root

9.8

CVE-2024-8225

Exploit
  • EPSS 0.27%
  • Veröffentlicht 27.08.2024 23:15:04
  • Zuletzt bearbeitet 29.08.2024 00:14:43

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is...

9.8

CVE-2024-4165

  • EPSS 0.5%
  • Veröffentlicht 25.04.2024 12:15:07
  • Zuletzt bearbeitet 21.11.2024 09:42:18

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file /goform/modifyDhcpRule. The manipulation of the argument bindDhcpIndex leads to stack-based buffer overflow...

9.8

CVE-2024-4164

  • EPSS 0.41%
  • Veröffentlicht 25.04.2024 11:15:46
  • Zuletzt bearbeitet 21.11.2024 09:42:18

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of the file /goform/ModifyPppAuthWhiteMac. The manipulation of the argument pppoeServerWhiteMacI...

9.8

CVE-2022-36586

  • EPSS 0.65%
  • Veröffentlicht 08.09.2022 00:15:10
  • Zuletzt bearbeitet 21.11.2024 07:13:21

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.

9.8

CVE-2022-36585

  • EPSS 0.65%
  • Veröffentlicht 07.09.2022 23:15:14
  • Zuletzt bearbeitet 21.11.2024 07:13:21

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.

9.8

CVE-2022-36584

  • EPSS 0.65%
  • Veröffentlicht 06.09.2022 17:15:08
  • Zuletzt bearbeitet 21.11.2024 07:13:21

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.