जमा करें #563557: Shenzhen Tenda Technology Co.,Ltd. AC1206 <=V15.03.06.23 Buffer Overflowजानकारी

शीर्षकShenzhen Tenda Technology Co.,Ltd. AC1206 <=V15.03.06.23 Buffer Overflow
विवरणTenda AC1206 V15.03.06.23 firmware has a buffer overflow vulnerability in the formSetCfm function, function sprintf(mib_name, "%s.list%d", list_name, counta); The funcpara1 string content is copied to the target region without bounds checking, causing the buffer to overflow and overwrite the memory area behind the array, which may cause the program to crash or even remote code execution, triggering this security vulnerability.
स्रोत⚠️ https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206formSetCfm/formSetCfm.md
उपयोगकर्ता
 CH13hh (UID 83683)
सबमिशन22/04/2025 11:57 AM (1 वर्ष पहले)
संयम05/05/2025 02:22 PM (13 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि307402 [Tenda AC1206 तक 15.03.06.23 /goform/setcfm formSetCfm बफ़र ओवरफ़्लो]
अंक20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!