In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tenda |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.kdev.site/cve-request_005/ |
|
History
Mon, 22 Jun 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Stack Buffer Overflow in Tenda AC7 Firmware Enabling Remote Code Execution |
Mon, 22 Jun 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Stack Buffer Overflow in Tenda AC7 Firmware 15.03.06.44’s wanSpeed Parameter Leading to Remote Code Execution | |
| Weaknesses | CWE-119 |
Mon, 22 Jun 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-121 | |
| Metrics |
cvssV3_1
|
Fri, 19 Jun 2026 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tenda
Tenda ac7 |
|
| Vendors & Products |
Tenda
Tenda ac7 |
Fri, 19 Jun 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Stack Buffer Overflow in Tenda AC7 Firmware 15.03.06.44’s wanSpeed Parameter Leading to Remote Code Execution | |
| Weaknesses | CWE-119 |
Fri, 19 Jun 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-06-19T00:00:00.000Z
Updated: 2026-06-22T17:15:47.887Z
Reserved: 2026-06-08T00:00:00.000Z
Link: CVE-2026-51846
Vulnrichment
Updated: 2026-06-22T15:37:25.874Z
NVD
No data.
Redhat
No data.