Back to KEVs

CVE-2021-31755

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows...

Basic Information

CVE State: PUBLISHED
Reserved Date: April 23, 2021
Published Date: May 07, 2021
Last Updated: October 21, 2025
Vendor: Tenda
Product: AC11
Description: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
Tags

CVSS Scores

CVSS v3.1

9.8 - CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2021-11-03 00:00:00 UTC) Source

References

https://github.com/Yu3H0/IoT_CVE/tree/main/Tenda/CVE_3

Known Exploited Vulnerability Information

Source	Added Date
CISA	2021-11-03 00:00:00 UTC
CISA	2021-11-03 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31755.yaml	2025-04-25 00:00:00 UTC

Timeline

CVE ID Reserved

April 23, 2021
CVE Published to Public

May 07, 2021
Added to KEVIntel

November 03, 2021
Added to KEVIntel

November 03, 2021
Detected by Nuclei

April 25, 2025