Vulnerabilities > Tenda > G3 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-27 | CVE-2024-8225 | Out-of-bounds Write vulnerability in Tenda G3 Firmware 15.11.0.20 A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. | 9.8 |
| 2022-09-08 | CVE-2022-36586 | Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663) In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary. | 9.8 |
| 2022-09-07 | CVE-2022-36585 | Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663) In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf. | 9.8 |
| 2022-09-07 | CVE-2022-36587 | Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663) In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary. | 9.8 |
| 2022-09-06 | CVE-2022-36584 | Classic Buffer Overflow vulnerability in Tenda G3 Firmware 15.11.0.6(7663) In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf. | 9.8 |
| 2021-04-14 | CVE-2021-27707 | Classic Buffer Overflow vulnerability in Tenda G1 Firmware and G3 Firmware Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. | 9.8 |
| 2021-04-14 | CVE-2021-27706 | Classic Buffer Overflow vulnerability in Tenda G1 Firmware and G3 Firmware Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. | 9.8 |
| 2021-04-14 | CVE-2021-27705 | Classic Buffer Overflow vulnerability in Tenda G1 Firmware and G3 Firmware Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. | 9.8 |