Plaid-Knot-11B

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version 16.03.10.09 multi TDE01 **Description** The Tenda AC10 firmware contains a stack overflow issue. The issue is located in the `R7WebsSecurityHandler` function and is triggered via the `Password` parameter. **Recommendations** Update to a newer firmware version to address this issue. As a temporary workaround, consider restricting the complexity or length of the `Password` parameter submitted to the `R7WebsSecurityHandler` function.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version 4.0 firmware 16.03.10.09 multi TDE01 **Description** Incorrect access control in the `/goform/ate` endpoint allows attackers to escalate privileges or access sensitive components via a crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version 4.0 firmware 16.03.10.20 **Description** The Tenda AC10 device contains a stack overflow issue via the `get parentControl list Info` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.