ACTIVELY EXPLOITED
CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability
| Vendor | Tenda |
|---|---|
| Product | AC11 Router |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 17 Nov 2021 |
| Weakness (CWE) | CWE-787 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
SOURCES
Other Tenda flaws
- CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
- CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.