Tenda g3 Firmware vulnerabilities

24 CVEs affecting Tenda g3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-57060, published 2025-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27705, published 2021-04-14. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the…
CVE-2021-27707, published 2021-04-14. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because…
CVE-2021-27706, published 2021-04-14. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs…
CVE-2024-4165, published 2024-04-25. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502). Affected is the function modifyDhcpRule of the file /goform/modifyDhcpRule. The manipulation of the argument…
CVE-2024-4164, published 2024-04-25. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(9502). This issue affects the function formModifyPppAuthWhiteMac of the file /goform/ModifyPppAuthWhiteMac.…
CVE-2024-8225, published 2024-08-27. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument…
CVE-2022-36586, published 2022-09-08. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
CVE-2022-36585, published 2022-09-07. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
CVE-2022-36587, published 2022-09-07. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
CVE-2022-36584, published 2022-09-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.

Latest

CVE-2025-57060, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57078, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to…
CVE-2025-57072, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This vulnerability allows attackers to cause a Denial of…
CVE-2025-57071, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57070, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57069, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57064, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57063, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of…
CVE-2025-57062, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-57061, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows…