critical9.8Known exploited
CVE-2021-31755
Tenda AC11 Router Stack Buffer Overflow Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.
Apply updates per vendor instructions.
Impact
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac11 Firmware | through 02.03.01.104_cn |