Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/sinemsahn/Public-CVE-Analysis