CVE-2023-24333: Tenda AC21 Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi.

Affected products

  • Tenda AC21 Firmware: version 16.03.08.15 only

Published 2024-02-21. Last modified 2026-06-17.