| शीर्षक | Tenda AC6 Tenda AC6V1.0 V15.03.05.19 Command Injection |
|---|
| विवरण | A stack-based buffer overflow vulnerability in the Tenda AC6V1.0 router (firmware V15.03.05.19) allows unauthenticated remote attackers to execute arbitrary code or cause denial of service (DoS) via the deviceList parameter in the /goform/setMacFilterCfg endpoint. The flaw resides in the sub_BE73C function (aliased as parse_macfilter_rule), which uses unsafe strcpy operations without bounds checking, enabling stack corruption.
The vulnerability exists in the formSetMacFilterCfg function, which processes HTTP POST requests to /goform/setMacFilterCfg. The deviceList parameter is passed to sub_BD758 and then to sub_BE73C (parse_macfilter_rule). The portion after \r is copied into a fixed-size buffer using strcpy(a2, src) without length validation. If the input exceeds the buffer size, it overflows the stack, potentially overwriting return addresses or other critical data. |
|---|
| स्रोत | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Tenda%20AC6%20overflow |
|---|
| उपयोगकर्ता | n0ps1ed (UID 88889) |
|---|
| सबमिशन | 10/08/2025 10:23 PM (1 वर्ष पहले) |
|---|
| संयम | 13/08/2025 01:17 PM (3 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 214715 [Tenda AC6 15.03.05.19 formSetMacFilterCfg बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|