Vulnerability Details CVE-2021-42659
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.0%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.1
References
Products affected by CVE-2021-42659
-
cpe:2.3:h:tenda:ac9:1.0
-
cpe:2.3:h:tenda:ac9:3.0
-
cpe:2.3:o:tenda:ac9_firmware:15.03.05.19(6318)
-
cpe:2.3:o:tenda:ac9_firmware:15.03.06.42_multi