Skip to main content

G1 Firmware

7 CVEs product

Monthly

CVE-2025-35027 Sep 26, 07:15 HIGH POC This Month

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Go2 Firmware G1 Firmware H1 Firmware B2 Firmware +1
NVD GitHub
CVSS 3.1
7.3
EPSS
0.2%
CVE-2025-8980 Aug 14, 20:15 MEDIUM This Month

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Tenda G1 Firmware
NVD GitHub VulDB
CVSS 4.0
6.6
EPSS
0.1%
CVE-2021-27692 Apr 16, 00:15 CRITICAL Act Now

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Tenda G1 Firmware G3 Firmware Tendacn
NVD
CVSS 3.1
9.8
EPSS
3.3%
CVE-2021-27691 Apr 16, 00:15 CRITICAL POC THREAT Act Now

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Tenda G1 Firmware G3 Firmware G0 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
25.2%
CVE-2021-27707 Apr 14, 15:15 CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda G1 Firmware G3 Firmware
NVD
CVSS 3.1
9.8
EPSS
2.8%
CVE-2021-27706 Apr 14, 15:15 CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda G1 Firmware G3 Firmware
NVD
CVSS 3.1
9.8
EPSS
2.8%
CVE-2021-27705 Apr 14, 15:15 CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda G1 Firmware G3 Firmware
NVD
CVSS 3.1
9.8
EPSS
2.9%
EPSS 0% CVSS 7.3
HIGH POC This Month

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Go2 Firmware G1 Firmware +3
NVD GitHub
EPSS 0% CVSS 6.6
MEDIUM This Month

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Tenda G1 Firmware
NVD GitHub VulDB
EPSS 3% CVSS 9.8
CRITICAL Act Now

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Tenda G1 Firmware +2
NVD
EPSS 25% CVSS 9.8
CRITICAL POC THREAT Act Now

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Tenda G1 Firmware +3
NVD
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda +2
NVD
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda +2
NVD
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Tenda +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy