CVE-2021-42659: Buffer Overflow
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42659?
CVE-2021-42659 is a buffer overflow vulnerability in the Web server httpd of Tenda router devices.
Which Tenda router devices are affected by CVE-2021-42659?
Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi are affected by CVE-2021-42659.
What is the impact of CVE-2021-42659?
The httpd program crashes and exits when a super-long list parameter occurs during the virtual service setting, exposing the vulnerability.
What is the severity of CVE-2021-42659?
CVE-2021-42659 has a severity rating of medium.
How can I fix the CVE-2021-42659 vulnerability?
Update the firmware of your Tenda router device to the latest version provided by the vendor.