| शीर्षक | Shenzhen Jixiang Tenda Technology Co., Ltd. Tenda AC6 v2.0_V15.03.06.51 Buffer Overflow |
|---|
| विवरण | Tenda AC6 is a wireless router from China's Tenda company.
During the analysis of the /bin/httpd binary file, it was discovered that in the addWifiMacFilter function, the parameters deviceId and deviceMac are directly accepted from client data through the websGetVar function without any length validation. This vulnerability allows users to construct overly long strings, causing program crashes and preventing normal operation. Additionally, attackers can craft carefully prepared payloads to achieve arbitrary command execution. |
|---|
| स्रोत | ⚠️ https://github.com/qazmn/my_cve/blob/main/Tenda/Tenda%20AC6%20stack_overflow_addWifiMacFilter.md |
|---|
| उपयोगकर्ता | b55t4ck (UID 89559) |
|---|
| सबमिशन | 31/08/2025 12:47 PM (1 वर्ष पहले) |
|---|
| संयम | 08/09/2025 07:00 AM (8 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 314554 [Tenda AC6 15.03.05.16_multi addWifiMacFilter deviceId बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|