CVE-2021-45995

Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.17(9502) CN

Description A stack overflow was discovered in the function formSetStaticRoute, allowing attackers to cause a Denial of Service (DoS) via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters.

Recommendations For Tenda routers G1 and G3 version 15.11.0.17(9502) CN, consider disabling the formSetStaticRoute function as a temporary workaround until a patch is available. Restrict access to the static route configuration to minimize the risk of exploitation. Avoid using the staticRouteNet, staticRouteMask, and staticRouteGateway parameters in the affected function until the issue is resolved.