TI-2024-03875 CVE-2024-4165 · GHSA-rc96-q2xm-fg7c
Tenda G3 modifyDhcpRule stack-based overflow
Priority HIGH 76
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502).
Tenda
Records1964All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical648CVSS 9.0–10.0
CVSS high1091CVSS 7.0–8.9
Exploited now
Tenda records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
24 records in G3 Firmware · all components
TI-2024-03874 CVE-2024-4164 · GHSA-qf72-rm58-xjjg
Tenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflow
Priority HIGH 75
A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502).
TI-2024-07624 CVE-2024-8225 · GHSA-5jg8-h8fr-865f
Tenda G3 SetSysTimeCfg formSetSysTime stack-based overflow
Priority HIGH 73
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20.
TI-2025-35438 CVE-2025-57078 · GHSA-6p8x-r4fp-qfrm
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function.
TI-2025-35437 CVE-2025-57072 · GHSA-j79m-6hhh-jc47
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function.
TI-2025-35436 CVE-2025-57071 · GHSA-5wcr-rmv8-7c46
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function.
TI-2025-35435 CVE-2025-57070 · GHSA-rfcq-4q6v-j372
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function.
TI-2025-35434 CVE-2025-57069 · GHSA-qp9g-j49f-5prp
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function.
TI-2025-35433 CVE-2025-57064 · GHSA-3jfv-rhc4-5hmj
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function.
TI-2025-35432 CVE-2025-57063 · GHSA-576x-vr78-m4v5
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function.
TI-2025-35431 CVE-2025-57062 · GHSA-j9cj-7q39-2254
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function.
TI-2025-35430 CVE-2025-57061 · GHSA-5x29-f67g-c46v
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters.
TI-2025-35428 CVE-2025-57059 · GHSA-8xx6-fm2f-r2vq
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function.
TI-2025-35426 CVE-2025-57057 · GHSA-7x43-3jm7-9hpm
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr…
Priority HIGH 72
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function.
TI-2024-32296 CVE-2024-48192 · GHSA-mwxv-gvxj-75w4
Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password…
Priority HIGH 70
Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root
TI-2025-35429 CVE-2025-57060 · GHSA-ggw2-p2qv-xgjw
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules…
Priority HIGH 66
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function.
TI-2021-09136 CVE-2021-27707 · GHSA-j3c8-7g58-h47h
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows…
Priority MEDIUM 47
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request.
TI-2021-09135 CVE-2021-27706 · GHSA-2p22-jp73-7gf2
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN…
Priority MEDIUM 47
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request.
TI-2021-09134 CVE-2021-27705 · GHSA-ffgg-83p3-wqxr
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows…
Priority MEDIUM 47
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request.
TI-2022-16896 CVE-2022-36587 · GHSA-vpw7-h96v-88rr
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability…
Priority MEDIUM 44
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
TI-2022-16895 CVE-2022-36586 · GHSA-f889-64wv-8qxv
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability…
Priority MEDIUM 44
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
TI-2022-16894 CVE-2022-36585 · GHSA-p26m-9jv5-q962
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule…
Priority MEDIUM 44
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
TI-2022-16893 CVE-2022-36584 · GHSA-573q-wfqj-jw5m
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
Priority MEDIUM 44
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
TI-2025-35427 CVE-2025-57058 · GHSA-5gf5-mr4v-87q2
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the…
Priority LOW 39
Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters.