CVE-2021-45990: Command Injection
Tenda routers G1 and G3 v15.11.0.17(9502)CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the picname parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45990?
CVE-2021-45990 has been classified as a high severity vulnerability due to its potential for command injection.
How can I fix CVE-2021-45990?
To mitigate CVE-2021-45990, users should update their Tenda G1 and G3 routers to the latest firmware version.
What types of devices are affected by CVE-2021-45990?
CVE-2021-45990 affects Tenda routers G1 and G3 running firmware version 15.11.0.17(9502)_CN.
What is the nature of the vulnerability in CVE-2021-45990?
CVE-2021-45990 is a command injection vulnerability that allows remote attackers to execute arbitrary commands.
What is the impact of CVE-2021-45990 on affected devices?
The impact of CVE-2021-45990 includes unauthorized access and the potential to compromise the integrity of the affected Tenda routers.