Soumettre #914958: Tenda Router US_W20EV4.0br_V15.11.0.61068_1546_841_CN_TDC Memory Corruptioninformation

TitreTenda Router US_W20EV4.0br_V15.11.0.61068_1546_841_CN_TDC Memory Corruption
DescriptionTenda W20E firmware US_W20EV4.0br_V15.11.0.61068_1546_841_CN_TDC contains a stack-based buffer overflow in the formIPMacBindAdd HTTP handler. The handler retrieves the attacker-controlled IPMacBindRule parameter using websGetVar() and copies it into the fixed-size stack buffer using strcpy() without length validation. Values of more characters overwrite adjacent stack memory and reliably crash the web management service. The confirmed impact is denial of service.
La source⚠️ https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/Tenda/W20E/formIPMacBindAdd/README.md
Utilisateur
 AmaIIl (UID 29184)
Soumission04/08/2026 16:20 (il y a 1 mois)
Modérer13/09/2026 07:01 (1 month later)
StatutAccepté
Entrée VulDB403221 [Tenda W20E 15.11.0.61068_1546_841_CN_TDC HTTP formIPMacBindAdd IPMacBindRule buffer overflow]
Points20

◂ PrécédentAperçuSuivant ▸

Do you need the next level of professionalism?

Upgrade your account now!