CVSS—
Severityhigh
Weakness—
ExploitedYes, in CISA KEV
Ransomware useUnknown
Federal fix dueNov 17, 2021
Description
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
Required action (CISA)
Apply updates per vendor instructions.
