| Titre | Tenda AC6 15.03.06.50 Stack-based Buffer Overflow |
|---|
| Description | A critical stack-based buffer overflow vulnerability has been discovered in the Tenda AC6 router firmware version 15.03.06.50. The vulnerability exists in the /goform/WifiGuestSet HTTP request handler and can be exploited by remote attackers to achieve code execution or cause denial of service through malformed HTTP requests. The vulnerability is triggered when processing requests containing the following parameters with excessive data lengths: shareSpeed. |
|---|
| La source | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/WifiGuestSet/WifiGuestSet.md |
|---|
| Utilisateur | z472421519 (UID 91218) |
|---|
| Soumission | 11/10/2025 19:52 (il y a 12 mois) |
|---|
| Modérer | 25/10/2025 18:55 (14 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 329895 [Tenda AC6 15.03.06.50 HTTP Request /goform/WifiGuestSet shareSpeed buffer overflow] |
|---|
| Points | 20 |
|---|