VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 7, 2021· Updated Jun 17, 2026

CVE-2021-31756

CVE-2021-31756

Description

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable.

Affected products

3
  • Tenda/Ac11 Firmware
    cpe:2.3:o:tenda:ac11_firmware:*:*:*:*:*:*:*:*
    Range: <=02.03.01.104_cn
  • Tenda/AC11description
  • Tenda/AC11llm-fuzzy
    Range: <=02.03.01.104_CN

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.