← Vulnerability feed

Vulnerability record · CVE-2021-31758 · published 7 May 2021

CVE-2021-31758: Tenda ac11 firmware out-of-bounds write vulnerability

Tenda · Ac11 Firmware

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.

9.8 CVSS 3.1 Critical EPSS 6.6% · top 6.4% CWE-787 · Out-of-bounds write
9.8CVSS 3.1 base score, v2 10.0
6.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_2 ExploitIssue TrackingThird Party Advisory
https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_2 ExploitIssue TrackingThird Party Advisory

Track CVE-2021-31758 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-31755Tenda AC11 router setmac stack buffer overflowTenda AC11 devices running firmware through 02.03.01.104_CN contain a stack buffer overflow in the /goform/setmac handler. A crafted POST request can…KEVEPSS 87%analysed9.8CVE-2021-46262Tenda ac11 firmware out-of-bounds write vulnerabilityTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This vulnerability allows attacke…EPSS 1.7%9.8CVE-2021-46263Tenda ac11 firmware out-of-bounds write vulnerabilityTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. This vulnerability allows atta…EPSS 1.7%9.8CVE-2021-46264Tenda ac11 firmware out-of-bounds write vulnerabilityTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module. This vulnerability allows at…EPSS 1.7%9.8CVE-2021-46265Tenda ac11 firmware out-of-bounds write vulnerabilityTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows a…EPSS 1.7%9.8CVE-2021-46321Tenda ac11 firmware out-of-bounds write vulnerabilityTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg module. This vulnerability allows …EPSS 1.7%9.8CVE-2021-31756Tenda ac11 firmware out-of-bounds write vulnerabilityAn issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allo…EPSS 2.9%9.8CVE-2021-31757Tenda ac11 firmware out-of-bounds write vulnerabilityAn issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows …EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-2021-31758), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.