| Title | Tenda HG3 N300 Wi-Fi xPON ONT HARD_VERSION=V2.0 , Version: 300003070 Remote code execution |
|---|
| Description | An remote code execution exists in Tenda-HG3 IoT devices . This vulnerability is caused by no No filter parameters errors, leading to command concatenation. Attackers can exploit this vulnerability to access internal interfaces, thereby execute arbitrary code on IoT. |
|---|
| Source | ⚠️ https://www.notion.so/Tenda-HG3-1-33d0c75766a8808d8b38e9d090cec7ab |
|---|
| User | 2er00ne (UID 91682) |
|---|
| Submission | 04/09/2026 10:42 (4 months ago) |
|---|
| Moderation | 04/26/2026 18:04 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 359719 [Tenda HG3 2.0 /boaform/formCountrystr countrystr os command injection] |
|---|
| Points | 14 |
|---|