CVE:CVE-2021-27692
CNNVD:CNNVD-202104-1198
Tenda G1 and G3是中国腾达（Tenda）公司的一个路由器。
Tenda G1 and G3 routers 存在操作系统命令注入漏洞，攻击者可利用该漏洞通过精心制作的“action umountUSBPartition”请求执行任意操作系统命令。
solution:Upgrade tendacn g1_firmware to a higher version than 15.11.0.16(9024_cn,15.11.0.17(9502_cn,and avoid the version 15.11.0.16(9024)_cn,15.11.0.17(9502)_cn; Upgrade tendacn g3_firmware to a higher version than 15.11.0.16(9024_cn,15.11.0.17(9502_cn,and avoid the version 15.11.0.16(9024)_cn,15.11.0.17(9502)_cn