CVE:CVE-2023-38937
CNNVD:CNNVD-202308-471
Tenda AC10是中国腾达（Tenda）公司的一款无线路由器。
Tenda AC10 V1.0 V15.03.06.23、AC1206 V15.03.06.23、AC8 v4 V16.03.34.06、AC6 V2.0 V15.03.06.23、AC7 V1.0 V15.03.06.44、AC5 V1.0 V15.03.06.28、AC9 V3.0 V15.03.06.42_multi 和 AC10 v4.0 V16.03.10.13版本存在安全漏洞，该漏洞源于formSetVirtualSer 函数中的list参数包含堆栈溢出漏洞。
solution:Upgrade tenda ac10_firmware to a higher version than 15.03.06.23,16.03.10.13,and avoid the version 15.03.06.23,16.03.10.13; Upgrade tenda ac1206_firmware to a higher version than 15.03.06.23,and avoid the version 15.03.06.23; Upgrade tenda ac8_firmware to a higher version than 16.03.34.06,and avoid the version 16.03.34.06; Upgrade tenda ac6_firmware to a higher version than 15.03.06.23,and avoid the version 15.03.06.23; Upgrade tenda ac7_firmware to a higher version than 15.03.06.44,and avoid the version 15.03.06.44; Upgrade tenda ac5_firmware to a higher version than 15.03.06.28,and avoid the version 15.03.06.28; Upgrade tenda ac9_firmware to a higher version than 15.03.06.42_multi,and avoid the version 15.03.06.42_multi