Tenda Vulnerabilities and Affected Products
Vulnerabilities associated with g1_firmware.
Products
Clear product- FH120249 vulnerabilities
- AC744 vulnerabilities
- AC1539 vulnerabilities
- CH2239 vulnerabilities
- fh1206_firmware37 vulnerabilities
- AC1836 vulnerabilities
- AC636 vulnerabilities
- AC10U30 vulnerabilities
- ac930 vulnerabilities
- F45330 vulnerabilities
- AC1029 vulnerabilities
- F45628 vulnerabilities
- AC826 vulnerabilities
- ac525 vulnerabilities
- ax1806_firmware24 vulnerabilities
- fh1201_firmware24 vulnerabilities
- f120223 vulnerabilities
- fh120323 vulnerabilities
- FH45123 vulnerabilities
- ac15_firmware21 vulnerabilities
- WH45021 vulnerabilities
- AC2020 vulnerabilities
- F45120 vulnerabilities
- fh1202_firmware20 vulnerabilities
- AC120619 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-27692CRITICAL | Tenda g1_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the "doSystemCmd" function with untrusted input. | CVSS9.8v3.1 | EPSS3.19% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |