CVE-2021-31758

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-05-07

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Ac11 Firmware (Tenda)

References

• https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_2