| عنوان | Tenda AC6V2.0 Tenda AC6V2.0 V15.03.06.23_multi Stack-based Buffer Overflow |
|---|
| الوصف | A vulnerability was determined in Tenda AC6V2.0 V15.03.06.23_multi. Specifically, the function saveParentControlInfo within the httpd binary is affected. This function improperly handles user-supplied input passed through the url argument or deviceId argument, causing a stack-based buffer overflow. By supplying an overly long string to the url parameter or deviceId parameter via a crafted HTTP request, an attacker can overwrite the return address on the stack. This vulnerability can be exploited remotely, leading to denial of service or, potentially, arbitrary code execution with root privileges. |
|---|
| المصدر | ⚠️ https://github.com/Axelioc/CVE/blob/main/Tenda/AC6V2.0/saveParentControlInfo.md |
|---|
| المستخدم | Haaalion (UID 89556) |
|---|
| ارسال | 01/06/2026 02:34 AM (4 أشهر منذ) |
|---|
| الاعتدال | 28/06/2026 08:39 PM (28 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 320803 [Tenda AC6 15.03.06.23 saveParentControlInfo deviceName تلف الذاكرة] |
|---|
| النقاط | 0 |
|---|