CVE-2021-31627

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-10-29 · updated 2026-07-09
Weakness: CWE-120

Description

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.

Affected products

Tendacn Ac9 Firmware: through 15.03.06.42_multi; through 15.03.05.19\(6318\)

References

https://github.com/Lyc-heng/routers/blob/main/routers/stack3.md
https://github.com/Lyc-heng/routers/blob/main/routers/stack3.md

Get alerted when CVE-2021-31627 or the next vulnerability affects your stack