| عنوان | Tenda Tenda A15 V15.13.07.13 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| الوصف | Tenda AC15 is a dual band three gigabit wireless router suitable for households with fiber optic cables up to 1000 megabits. It supports gigabit ports, intelligent frequency band selection, parental control, and other functions. Shenzhen Jixiang Tengda Technology Co., Ltd. AC15 has a binary vulnerability that attackers can exploit to cause stack overflow.
The formSetDevNetName function, which uses websGetVar to retrieve the mac parameter and passes it as the second argument to the set_device_name function.
In the set_device_name function, the sprintf function does not validate the length of the mac parameter, directly writing it into the buffer.
1.Device Crash: The target device crashes, causing a Denial of Service (DoS).
2.Arbitrary Code Execution: Through buffer overflow, the attacker can execute arbitrary code, taking full control of the device.
3.Further Exploitation: The device can be used as a springboard to attack other targets within the internal network. |
|---|
| المصدر | ⚠️ https://pan.baidu.com/s/1DBDf27oCTIMkW-PSZwg02Q?pwd=tara |
|---|
| المستخدم | polaris0x1 (UID 67906) |
|---|
| ارسال | 17/01/2025 02:48 PM (2 سنوات منذ) |
|---|
| الاعتدال | 18/01/2025 08:45 AM (18 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 292527 [Tenda AC15 15.13.07.13 /goform/SetDevNetName formSetDevNetName mac تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|