| Titel | Shenzhen Tenda Technology Co., Ltd. Tenda AC10 V4.0 V16.03.10.13 Router V16.03.10.13 Stack-based Buffer Overflow |
|---|
| Beschreibung | The Tenda AC10 V4.0 (V16.03.10.13) router is affected by a stack overflow vulnerability. Attackers can exploit this vulnerability by sending specially crafted requests, leading to a stack overflow that may crash the router or disrupt its services.
The vulnerability resides in the ShutdownSetAdd function. Specifically, the program fails to properly restrict the length of user-supplied input for the list parameter, resulting in a stack overflow when calling scanf.
|
|---|
| Quelle | ⚠️ https://github.com/LxxxtSec/CVE/blob/main/CVE_1.md |
|---|
| Benutzer | Lxxxt (UID 83119) |
|---|
| Einreichung | 25.03.2025 08:01 (vor 2 Jahren) |
|---|
| Moderieren | 03.04.2025 08:58 (9 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 303107 [Tenda AC10 16.03.10.13 /goform/ShutdownSetAdd list Pufferüberlauf] |
|---|
| Punkte | 20 |
|---|