This vulnerability affects Tenda AC6 routers running firmware version 15.03.06.23. The issue lies in the formWifiApScan function of the /goform/WifiApScan HTTP endpoint, where insufficient input validation on the wl2g.public.country and wl5g.public.country parameters allows remote attackers to perform OS command injection. The vulnerability can be exploited without user interaction and requires low attack complexity. The CVSS 4.0 base score is 5.3, indicating medium severity. No official fix or patch has been disclosed, and the device is not a cloud service, so remediation depends on vendor action.

Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected device, potentially compromising the router's integrity and confidentiality. This could lead to unauthorized control over the device or network traffic manipulation. However, the vulnerability requires low privileges and no user interaction, increasing its risk. There are no confirmed active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a vendor fix is available, affected users should consider disabling remote management features if possible or restrict access to the device's management interface to trusted networks only. Monitor official Tenda channels for updates or firmware patches addressing this vulnerability.