CVE-2021-31624: Buffer Overflow
Published Oct 29, 2021
·Updated
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the urls parameter.
Affected Software
8 affected components
Tendacn Ac9 Firmware<=15.03.06.42_multi
Tendacn Ac9=3.0
Tendacn Ac9 Firmware<=15.03.05.19\(6318\)
Tendacn Ac9=1.0
All of the following
Tendacn Ac9 Firmware<=15.03.06.42_multi
Tendacn Ac9=3.0
All of the following
Tendacn Ac9 Firmware<=15.03.05.19\(6318\)
Tendacn Ac9=1.0
Event History
Oct 29, 2021
CVE Published
via MITRE·10:25 AM
Data Sourced
via MITRE·10:25 AM
Description
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-31624?
CVE-2021-31624 is classified as a high severity buffer overflow vulnerability.
2
How do I fix CVE-2021-31624?
To fix CVE-2021-31624, update the Tenda AC9 firmware to a version higher than V15.03.06.42_multi.
3
What devices are affected by CVE-2021-31624?
CVE-2021-31624 affects Tenda AC9 V1.0 firmware versions up to V15.03.05.19(6318) and V3.0 firmware versions up to V15.03.06.42_multi.
4
Can CVE-2021-31624 allow remote code execution?
Yes, CVE-2021-31624 allows attackers to execute arbitrary code through manipulation of the urls parameter.
5
What impact can CVE-2021-31624 have on affected systems?
CVE-2021-31624 can lead to unauthorized access and control over the affected Tenda AC9 devices.