Submit #800796: Tenda HG3 N300 Wi-Fi xPON ONT HARD_VERSION=V2.0 , Version: 300003070 Remote code executioninfo

TitleTenda HG3 N300 Wi-Fi xPON ONT HARD_VERSION=V2.0 , Version: 300003070 Remote code execution
DescriptionAn remote code execution exists in Tenda-HG3 IoT devices . This vulnerability is caused by no No filter parameters errors, leading to command concatenation. Attackers can exploit this vulnerability to access internal interfaces, thereby execute arbitrary code on IoT.
Source⚠️ https://www.notion.so/Tenda-HG3-3250c75766a880c7b50fde0466557c5f
User
 2er00ne (UID 91682)
Submission04/09/2026 07:46 (18 days ago)
Moderation04/26/2026 10:56 (17 days later)
StatusAccepted
VulDB entry359671 [Tenda HG3 2.0 300003070 formgponConf fmgpon_loid os command injection]
Points14

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!