CVE-2021-31756: Buffer Overflow
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31756?
CVE-2021-31756 is considered to be a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2021-31756?
To fix CVE-2021-31756, upgrade the Tenda AC11 firmware to a version above 02.03.01.104_CN.
What is the nature of CVE-2021-31756?
CVE-2021-31756 is a stack buffer overflow vulnerability found in the /gofrom/setwanType endpoint.
Who is affected by CVE-2021-31756?
Devices running Tenda AC11 firmware version 02.03.01.104_CN and below are affected by CVE-2021-31756.
Can CVE-2021-31756 be exploited remotely?
Yes, CVE-2021-31756 can be exploited remotely by sending a crafted post request to the vulnerable device.