CVE-2023-24332: Tenda AC6 Firmware

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet.

Affected products

• Tenda AC6 Firmware: version 03.03.02.01_cn_tdc01 only

Published 2024-02-21. Last modified 2026-06-17.