GF
Product
G3 Firmware
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 14Medium 0Low 0
Watch
Add G3 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8225 | 9.8 | Aug 27 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20 Affected: 15.11.0.20 |
| CVE-2024-4165 | 9.8 | Apr 25 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502) Affected: 15.11.0.17(9502)_cn |
| CVE-2024-4164 | 9.8 | Apr 25 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502) Affected: 15.11.0.17(9502)_cn |
| CVE-2022-36586 | 9.8 | Sep 8 | In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary Affected: 15.11.0.6(7663) |
| CVE-2022-36585 | 9.8 | Sep 7 | In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf Affected: 15.11.0.6(7663) |
| CVE-2022-36587 | 9.8 | Sep 7 | In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary Affected: 15.11.0.6(7663) |
| CVE-2022-36584 | 9.8 | Sep 6 | In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf Affected: 15.11.0.6(7663) |
| CVE-2021-27707 | 9.8 | Apr 14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request Affected: v15.11.0.17(9502)_cn |
| CVE-2021-27706 | 9.8 | Apr 14 | Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex… Affected: v15.11.0.17(9502)_cn |
| CVE-2021-27705 | 9.8 | Apr 14 | Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request Affected: v15.11.0.17(9502)_cn |
| CVE-2024-48192 | 8.0 | Oct 17 | Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root Affected: 15.01.0.5(2848_755)_en |
| CVE-2025-57060 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function Affected: through 15.11.0.17 |
| CVE-2025-57078 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function Affected: through 15.11.0.17 |
| CVE-2025-57072 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57071 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57070 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57069 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57064 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57063 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57062 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57061 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57059 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57058 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters Affected: through 15.11.0.17\(9502\) |
| CVE-2025-57057 | 7.5 | Sep 9 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function Affected: through 15.11.0.17\(9502\) |
Showing 24
