In Tenda G3 USG3V3.0brV15.11.0.6(7663)ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
In Tenda G3 USG3V3.0brV15.11.0.6(7663)ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
In Tenda G3 USG3V3.0brV15.11.0.6(7663)ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
In Tenda G3 USG3V3.0brV15.11.0.6(7663)ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf.