CVE:CVE-2020-13392
CNNVD:CNNVD-202005-1142
Tenda AC9等都是中国腾达（Tenda）公司的一款无线路由器。
多款Tenda产品中的httpd存在缓冲区错误漏洞。攻击者可通过向/goform/setcfm URL发送‘funcpara1’参数利用该漏洞执行任意代码。以下产品及版本受到影响：Tenda AC6 V1.0 V15.03.05.19_multi_TD01版本，AC9 V1.0 V15.03.05.19（6318）_CN版本，AC9 V3.0 V15.03.06.42_multi版本，AC15 V1.0 V15.03.05.19_multi_TD01版本，AC18 V15.03.05.19（6318 _）_ CN版本。
solution:Upgrade tendacn ac6_firmware to a higher version than v15.03.05.19_multi_td01,and avoid the version v15.03.05.19_multi_td01; Upgrade tendacn ac9_firmware to a higher version than v15.03.05.19(6318,v15.03.06.42_multi,and avoid the version v15.03.05.19(6318),v15.03.06.42_multi; Upgrade tendacn ac15_firmware to a higher version than v15.03.05.19_multi_td01,and avoid the version v15.03.05.19_multi_td01; Upgrade tendacn ac18_firmware to a higher version than v15.03.05.19(6318,and avoid the version v15.03.05.19(6318)