You Sun

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V15.03.06.46 **Description** The issue is related to a Buffer Overflow in the formSetPPTPUserList handler. This occurs via the `list` POST parameter. **Recommendations** For Tenda AC10 version V15.03.06.46, as a temporary workaround, consider disabling the formSetPPTPUserList handler until a patch is available. Avoid using the `list` parameter in the affected handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.