| Título | Tenda AC6 15.03.06.50 Stack-based Buffer Overflow |
|---|
| Descripción | A critical stack-based buffer overflow vulnerability has been discovered in the Tenda AC6 router firmware version 15.03.06.50. The vulnerability exists in the /goform/WifiGuestSet HTTP request handler and can be exploited by remote attackers to achieve code execution or cause denial of service through malformed HTTP requests. The vulnerability is triggered when processing requests containing the following parameters with excessive data lengths: shareSpeed. |
|---|
| Fuente | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/WifiGuestSet/WifiGuestSet.md |
|---|
| Usuario | z472421519 (UID 91218) |
|---|
| Sumisión | 2025-10-11 19:52 (hace 12 meses) |
|---|
| Moderación | 2025-10-25 18:55 (14 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 329895 [Tenda AC6 15.03.06.50 HTTP Request /goform/WifiGuestSet shareSpeed desbordamiento de búfer] |
|---|
| Puntos | 20 |
|---|