| Titel | Tenda HG10 HG7_HG9_HG10re_300001138 Denial of Service |
|---|
| Beschreibung | The Boa web server's formURL function was analyzed using IDA Pro. The function entry address identified in the analysis is 0x0046F850. The Keywd parameter is obtained from the HTTP request and later copied into a fixed-size buffer. The unsafe copy operation does not verify that the destination buffer is large enough for the supplied value, so an overlong request can overwrite adjacent memory. |
|---|
| Quelle | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/bof-formURL-keywd.md |
|---|
| Benutzer | sunnyyaya (UID 79818) |
|---|
| Einreichung | 19.07.2026 16:34 (vor 2 Monaten) |
|---|
| Moderieren | 05.09.2026 12:32 (2 months later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 399304 [Tenda HG10 300001138 /boaform/admin/formURL Keywd/urlFQDN Pufferüberlauf] |
|---|
| Punkte | 20 |
|---|