CVE-2021-40546

CVE Enrichment

CVSS: 4.9 MEDIUM
EPSS: 0.73%
EPSS Percentile: 53.43%
CISA KEV: Not listed

Description

Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G parameter to /goform/setWifi.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@mitre.org
Published: 06-Sep-2023 02:15
Last Modified: 17-Jun-2026 11:07
EPSS Date: 2026-10-19
CWE: CWE-404

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:U /
                            C:N /
                            I:N /
                            A:H

Affected Products / Versions

tenda / ac6_firmware
Version / affected range: 02.03.01.26
cpe:2.3:o:tenda:ac6_firmware:02.03.01.26:*:*:*:*:*:*:*

References

af854a3a-2127-422b-91ae-364da2661108

Last enrichment sync: 20-Oct-2026 04:04
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

patch was issued. Two additional log4j versions were released to fix less severe vulnerabilities (CVE-2021-40546, CVE-2021-45105) and workaround instructions were modified. In other words, remediation is a moving Enterprises Had Patched 45% of Vulnerable Cloud Resources 10 Days After Log4Shell Disclosure

CVE (2)

Vendors (2)

Products (1)

Industries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.