Hg10 Firmware vulnerabilities
3 known vulnerabilities in Hg10 Firmware from Tenda. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
HG10: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to i
- 7.3 High severity
HG10: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host results in c
- 7.3 High severity
HG10: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command injection