| Título | Tenda A18 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| Descripción | A security flaw exists in the web management interface of the Tenda A18 router. Specifically, the formWifiBasicSet function, which handles WiFi basic setting requests, fails to properly validate the length of user-supplied input parameters. By sending a specially crafted malicious POST request, an attacker can leverage an unsafe strcpy function to trigger a stack overflow, leading to a Denial of Service (DoS) or Remote Code Execution (RCE). |
|---|
| Fuente | ⚠️ https://github.com/master-abc/cve/issues/41 |
|---|
| Usuario | 942384053 (UID 94603) |
|---|
| Sumisión | 2026-02-10 17:39 (hace 8 meses) |
|---|
| Moderación | 2026-02-21 16:10 (11 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 237170 [Tenda A18 15.13.07.09 formWifiBasicSet security desbordamiento de búfer] |
|---|
| Puntos | 0 |
|---|