Tenda AC6V1.0 V15.03.05.19 exists to contain a buffer overflow via the deviceId parameter in the formSetClientState function.
tendacn ac6_firmware 15.03.05.19