CVE-2021-45987: OS Command Injection
Tenda routers G1 and G3 v15.11.0.17(9502)CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45987?
CVE-2021-45987 is considered a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2021-45987?
To remediate CVE-2021-45987, it is recommended to update your Tenda G1 or G3 router firmware to the latest version from the manufacturer.
What products are affected by CVE-2021-45987?
CVE-2021-45987 affects Tenda routers G1 and G3 running firmware version 15.11.0.17(9502)_CN.
What type of vulnerability is CVE-2021-45987?
CVE-2021-45987 is classified as a command injection vulnerability.
Can CVE-2021-45987 be exploited remotely?
Yes, CVE-2021-45987 can be exploited remotely, allowing attackers to execute malicious commands on affected devices.