CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2021-45990

2022-02-08

N/A

9.8 CRITICAL

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the pic_name parameter.

CVE-2021-45989

2022-02-08

N/A

7.5 HIGH

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream parameters.

CVE-2021-45988

2022-02-08

N/A

7.5 HIGH

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter.

CVE-2021-45987

2022-07-12

N/A

9.8 CRITICAL

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.

CVE-2021-45986

2022-07-12

N/A

9.8 CRITICAL

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.

CVE-2021-45983

Netscout, Ngeniusone

Airmagnet_enterprise, Cdm_agent_firmware_maintenance_release, Ngenius_client, Ngenius_express_appliance, Ngenius_flow_recorder, Ngenius_infinistream, Ngeniusone, Ngenius_performance_manager, Ngenius_probes, Ngenius_trace_analyzer_integrator

2022-06-13

N/A

9.8 CRITICAL

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.

CVE-2021-45982

2022-06-11

N/A

8.8 HIGH

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.