Hg3
Monthly
Command injection in the Tenda HG3 2.0 gateway/router allows an authenticated remote attacker to inject arbitrary OS commands through the formTracert handler at /boaform/formTracert by manipulating the datasize argument (CWE-77). Publicly available exploit code exists (disclosed via VulDB), though there is no public exploit identified as being actively used in the wild and it is not listed in CISA KEV. EPSS is modest at 0.29% (52nd percentile), indicating exploitation is plausible but not yet widespread.
Stack-based buffer overflow in the Tenda HG3 2.0 router allows authenticated remote attackers to corrupt memory by supplying an oversized destNet parameter to the formUploadConfig handler at the /boaform/formIPv6Routing endpoint. Publicly available exploit code exists, though EPSS rates real-world exploitation probability very low (0.05%, 14th percentile) and there is no public exploit identified as actively exploited. Successful exploitation yields total impact to confidentiality, integrity, and availability, typically manifesting as device crash or arbitrary code execution on the embedded system.
Command injection in the Tenda HG3 2.0 gateway/router allows an authenticated remote attacker to inject arbitrary OS commands through the formTracert handler at /boaform/formTracert by manipulating the datasize argument (CWE-77). Publicly available exploit code exists (disclosed via VulDB), though there is no public exploit identified as being actively used in the wild and it is not listed in CISA KEV. EPSS is modest at 0.29% (52nd percentile), indicating exploitation is plausible but not yet widespread.
Stack-based buffer overflow in the Tenda HG3 2.0 router allows authenticated remote attackers to corrupt memory by supplying an oversized destNet parameter to the formUploadConfig handler at the /boaform/formIPv6Routing endpoint. Publicly available exploit code exists, though EPSS rates real-world exploitation probability very low (0.05%, 14th percentile) and there is no public exploit identified as actively exploited. Successful exploitation yields total impact to confidentiality, integrity, and availability, typically manifesting as device crash or arbitrary code execution on the embedded system.