CVE-2022-36586: Tenda g3 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.

Affected products

  • Tenda g3 Firmware: version 15.11.0.6(7663) only

Published 2022-09-08. Last modified 2026-06-17.