Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
- https://github.com/Ghostsuzhijian/Iot-/blob/main/ac9_telnetd/rx3_telnetd.md
No PoCs found on GitHub currently.