Show filters
23 Total Results
Displaying 1-10 of 23
Sort by:
Attacker Value
Unknown

CVE-2022-24172

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter.
Attacker Value
Unknown

CVE-2022-24171

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.
Attacker Value
Unknown

CVE-2022-24170

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.
Attacker Value
Unknown

CVE-2022-24169

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.
Attacker Value
Unknown

CVE-2022-24168

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.
Attacker Value
Unknown

CVE-2022-24167

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.
Attacker Value
Unknown

CVE-2022-24166

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.
Attacker Value
Unknown

CVE-2022-24165

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter.
Attacker Value
Unknown

CVE-2022-24164

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.
Attacker Value
Unknown

CVE-2021-45997

Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.