CVE-2021-42659

Name of the Vulnerable Software and Affected Versions Tenda AC9 V1.0 V15.03.02.19(6318) Tenda AC9 V3.0 V15.03.06.42 multi

Description There is a buffer overflow issue in the Web server httpd of Tenda router devices. This occurs when setting the virtual service and a super-long list parameter is provided, causing the httpd program to crash and exit.

Recommendations For Tenda AC9 V1.0 V15.03.02.19(6318), consider disabling the virtual service feature until a patch is available. For Tenda AC9 V3.0 V15.03.06.42 multi, restrict access to the httpd program to minimize the risk of exploitation. As a temporary workaround, avoid using super-long list parameters when setting the virtual service.