Cao Ngoc Quy

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version US AC10V4.0si V16.03.10.20 cn **Description** The issue allows a remote attacker to execute arbitrary code via the `Virtual Data Check` function in the bin/httpd component. This can be exploited to gain unauthorized access and control over the affected device. **Recommendations** For Tenda AC10 version US AC10V4.0si V16.03.10.20 cn, as a temporary workaround, consider disabling the `Virtual Data Check` function in the bin/httpd component until a patch is available. Restrict access to the bin/httpd component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC19 version 1.0 Tenda AC18 (affected versions not specified) Tenda AC9 version 1.0 Tenda AC6 versions 1.0 through 2.0 **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `formSetCfm` function in `bin/httpd`. **Recommendations** For Tenda AC19 version 1.0, update to a version that fixes the Buffer Overflow issue in the `formSetCfm` function. For Tenda AC18, apply the necessary patch or update to resolve the Buffer Overflow vulnerability. For Tenda AC9 version 1.0, update the firmware to address the Buffer Overflow issue. For Tenda AC6 versions 1.0 through 2.0, apply a patch or update that fixes the Buffer Overflow vulnerability in the `formSetCfm` function. As a temporary workaround, consider disabling the `formSetCfm` function until a patch is available.