High severity8.1NVD Advisory· Published Feb 21, 2024· Updated Jun 17, 2026

CVE-2023-24332

Description

A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet.

Affected products

Tenda/Ac6 Firmware
cpe:2.3:o:tenda:ac6_firmware:03.03.02.01_cn_tdc01:*:*:*:*:*:*:*
Tenda/AC6cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: US_AC6V5.0re_V03.03.02.01_cn_TDC01

Patches

Vulnerability mechanics

References

github.com/caoyebo/CVE/tree/main/Tenda%20AC6%20-%20CVE-2023-24332nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000