| Titel | Tenda AX3 V16.03.12.10_CN Stack-based Buffer Overflow |
|---|
| Beschreibung | We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's SetSysTimeCfg function, ntpServer is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ntpServer to execute arbitrary code. |
|---|
| Quelle | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_45/45.md |
|---|
| Benutzer | Ziyue Xie (UID 89123) |
|---|
| Einreichung | 17.08.2025 16:14 (vor 1 Jahr) |
|---|
| Moderieren | 28.08.2025 17:17 (11 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 321174 [Tenda AX3 16.03.12.10_CN fromSetSysTime ntpServer Pufferüberlauf] |
|---|
| Punkte | 0 |
|---|