CVE-2021-44971: Tenda AC15 Firmware

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.

Affected products

• Tenda AC15 Firmware: version 15.03.05.20_multi only
• Tenda AC5 Firmware: version 15.03.06.48_multi only

Published 2022-01-28. Last modified 2026-07-09.