| Título | Shenzhen Tenda Technology Co., Ltd. Tenda AC10 V4.0 V16.03.10.13 Router V16.03.10.13 Stack-based Buffer Overflow |
|---|
| Descripción | The Tenda AC10 V4.0 (V16.03.10.13) router is affected by a stack overflow vulnerability. Attackers can exploit this vulnerability by sending specially crafted requests, leading to a stack overflow that may crash the router or disrupt its services.
The vulnerability resides in the ShutdownSetAdd function. Specifically, the program fails to properly restrict the length of user-supplied input for the list parameter, resulting in a stack overflow when calling scanf.
|
|---|
| Fuente | ⚠️ https://github.com/LxxxtSec/CVE/blob/main/CVE_1.md |
|---|
| Usuario | Lxxxt (UID 83119) |
|---|
| Sumisión | 2025-03-25 08:01 (hace 2 años) |
|---|
| Moderación | 2025-04-03 08:58 (9 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 303107 [Tenda AC10 16.03.10.13 /goform/ShutdownSetAdd list desbordamiento de búfer] |
|---|
| Puntos | 20 |
|---|