PatchTheCVE: g3 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-57060: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forwahttps://patchthecve.com/cve/CVE-2025-57060.htmlhttps://patchthecve.com/cve/CVE-2025-57060.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57078: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex paramethttps://patchthecve.com/cve/CVE-2025-57078.htmlhttps://patchthecve.com/cve/CVE-2025-57078.htmlWed, 17 Jun 2026 09:42:50 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57072: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in https://patchthecve.com/cve/CVE-2025-57072.htmlhttps://patchthecve.com/cve/CVE-2025-57072.htmlWed, 17 Jun 2026 09:42:50 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57071: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAdhttps://patchthecve.com/cve/CVE-2025-57071.htmlhttps://patchthecve.com/cve/CVE-2025-57071.htmlWed, 17 Jun 2026 09:42:50 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57070: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifihttps://patchthecve.com/cve/CVE-2025-57070.htmlhttps://patchthecve.com/cve/CVE-2025-57070.htmlWed, 17 Jun 2026 09:42:50 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57069: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinhttps://patchthecve.com/cve/CVE-2025-57069.htmlhttps://patchthecve.com/cve/CVE-2025-57069.htmlWed, 17 Jun 2026 09:42:50 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57064: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the mhttps://patchthecve.com/cve/CVE-2025-57064.htmlhttps://patchthecve.com/cve/CVE-2025-57064.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57063: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in thhttps://patchthecve.com/cve/CVE-2025-57063.htmlhttps://patchthecve.com/cve/CVE-2025-57063.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57062: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the fohttps://patchthecve.com/cve/CVE-2025-57062.htmlhttps://patchthecve.com/cve/CVE-2025-57062.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57061: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify funchttps://patchthecve.com/cve/CVE-2025-57061.htmlhttps://patchthecve.com/cve/CVE-2025-57061.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57059: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhhttps://patchthecve.com/cve/CVE-2025-57059.htmlhttps://patchthecve.com/cve/CVE-2025-57059.htmlWed, 17 Jun 2026 09:42:49 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57058: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg functionhttps://patchthecve.com/cve/CVE-2025-57058.htmlhttps://patchthecve.com/cve/CVE-2025-57058.htmlWed, 17 Jun 2026 09:42:48 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-57057: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBihttps://patchthecve.com/cve/CVE-2025-57057.htmlhttps://patchthecve.com/cve/CVE-2025-57057.htmlWed, 17 Jun 2026 09:42:48 +0000HIGH 7.5: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2024-50854: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.https://patchthecve.com/cve/CVE-2024-50854.htmlhttps://patchthecve.com/cve/CVE-2024-50854.htmlWed, 17 Jun 2026 08:05:08 +0000HIGH 8.8: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.CVE-2024-50853: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg https://patchthecve.com/cve/CVE-2024-50853.htmlhttps://patchthecve.com/cve/CVE-2024-50853.htmlWed, 17 Jun 2026 08:05:07 +0000HIGH 8.8: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.CVE-2024-50852: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartithttps://patchthecve.com/cve/CVE-2024-50852.htmlhttps://patchthecve.com/cve/CVE-2024-50852.htmlWed, 17 Jun 2026 08:05:07 +0000HIGH 8.8: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.CVE-2024-48192: Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadohttps://patchthecve.com/cve/CVE-2024-48192.htmlhttps://patchthecve.com/cve/CVE-2024-48192.htmlWed, 17 Jun 2026 07:58:16 +0000HIGH 8.0: Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as rootCVE-2024-46628: Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability vihttps://patchthecve.com/cve/CVE-2024-46628.htmlhttps://patchthecve.com/cve/CVE-2024-46628.htmlWed, 17 Jun 2026 07:55:38 +0000CRITICAL 9.8: Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.CVE-2024-8225: A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20https://patchthecve.com/cve/CVE-2024-8225.htmlhttps://patchthecve.com/cve/CVE-2024-8225.htmlWed, 17 Jun 2026 08:22:09 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploCVE-2024-8224: A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20https://patchthecve.com/cve/CVE-2024-8224.htmlhttps://patchthecve.com/cve/CVE-2024-8224.htmlWed, 17 Jun 2026 08:22:09 +0000HIGH 8.8: A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotely.