Stack Buffer Overflow Vulnerability in Tenda AC11 Devices

CVE-2021-31756

Summary

A stack buffer overflow vulnerability exists in Tenda AC11 devices running specific firmware versions. This issue occurs in the /gofrom/setwanType endpoint, where malicious input can be exploited through crafted POST requests. When the attacker-controlled input is incorrectly handled, it leads to arbitrary code execution on the device, potentially compromising the system's integrity and security.

References