Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the sub452A4 function.

There is a RCE vulnerability in Tenda AC6 15.03.05.16multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId.