Tr3000 1.0

Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Password Parameter

Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Username

Cudy TR3000 before 2.5.42 Command Injection via WireGuard private_key Export

Cudy TR3000 before 2.5.42 Command Injection via VPN Configuration Upload Filename

Cudy TR3000 before 2.5.42 Command Injection via vpn.export_conf WireGuard Private Key

Cudy TR3000 before 2.5.42 Command Injection via OpenVPN Client Configuration Upload

Cudy TR3000 before 2.5.42 Stack Buffer Overflow via stun_client UDP Parser

Cudy TR3000 before 2.5.42 Curl Argument Injection via TR-069 Upload

Cudy TR3000 before 2.5.42 Stack Buffer Overflow via CWMP Basic Authorization Builder

Cudy TR3000 before 2.5.42 Stack Buffer Overflow via obuspa KeyPassphrase Getter

Cudy TR3000 before 2.5.42 Unauthenticated RCE via mDNS Automesh Broker Adoption

Cudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none Tokens

Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Configuration Import

Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Key Upload Injection

Cudy TR3000 before 2.5.42 Authenticated RCE via vpn.set_conf Mass Assignment

Cudy TR3000 before 2.5.42 Command Injection via vpn.set_conf IPsec keyexchange

Cudy TR3000 before 2.5.42 Command Injection via Scheduled Reboot Time

Cudy TR3000 before 2.5.42 SMT Message Forgery via Probe Request Vendor IE

Cudy TR3000 before 2.5.42 dnsmasq Configuration Injection via net.set_dhcp

Cudy TR3000 before 2.5.42 pppd Option Injection via net.set_wan L2TP Credentials