Tenda AC11 Firmware vulnerabilities

9 CVEs affecting Tenda AC11 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-46321, published 2022-02-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability, published 2021-05-07. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 86.5% chance of exploitation in the next 30 days. An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system…
CVE-2021-31758, published 2021-05-07. Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days. An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the…
CVE-2021-31757, published 2021-05-07. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system…
CVE-2021-31756, published 2021-05-07. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the…
CVE-2021-46321, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via…
CVE-2021-46265, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via…
CVE-2021-46264, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module. This vulnerability allows attackers to cause a Denial of Service (DoS) via…
CVE-2021-46263, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. This vulnerability allows attackers to cause a Denial of Service (DoS) via…
CVE-2021-46262, published 2022-02-15. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted…