G3 Firmware (Tenda) - vulnerabilities (CVEs)
26 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2025-09-09. Vendor: Tenda.
CVEs of G3 Firmware
- CVE-2025-57060 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerability…
- CVE-2025-57078 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function.…
- CVE-2025-57064 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability…
- CVE-2025-57071 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows…
- CVE-2025-57063 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This…
- CVE-2025-57070 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerability allows…
- CVE-2025-57069 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows…
- CVE-2025-57072 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This…
- CVE-2025-57059 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability allows…
- CVE-2025-57058 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule…
- CVE-2025-57062 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability…
- CVE-2025-57061 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark…
- CVE-2025-57057 - CVSS 7.5 (high), 2025-09-09: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows…
- CVE-2024-48192 - CVSS 8 (high), 2024-10-17: Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root
- CVE-2024-46628 - CVSS 9.8 (critical), 2024-09-26: Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the…
- CVE-2024-8225 - CVSS 9.8 (critical), 2024-08-27: A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file…
- CVE-2024-8224 - CVSS 9.8 (critical), 2024-08-27: A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file…
- CVE-2024-4165 - CVSS 9.8 (critical), 2024-04-25: A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file…
- CVE-2024-4164 - CVSS 9.8 (critical), 2024-04-25: A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of…
- CVE-2022-36586 - CVSS 9.8 (critical), 2022-09-08: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
- CVE-2022-36585 - CVSS 9.8 (critical), 2022-09-07: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
- CVE-2022-36587 - CVSS 9.8 (critical), 2022-09-07: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
- CVE-2022-36584 - CVSS 9.8 (critical), 2022-09-06: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
- CVE-2021-27707 - CVSS 9.8 (critical), 2021-04-14: Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted…
- CVE-2021-27706 - CVSS 9.8 (critical), 2021-04-14: Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted…
- CVE-2021-27705 - CVSS 9.8 (critical), 2021-04-14: Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex…
