| शीर्षक | Shenzhen Jixiang Tenda Technology Co., Ltd. Tenda AC6 v2.0_V15.03.06.51 Buffer Overflow |
|---|
| विवरण | Tenda AC6 is a wireless router from China's Tenda company.
During analysis of the /bin/httpd binary, it was discovered that the firewallEn parameter in the formSetFirewallCfg function directly accepts client data through websGetVar without any length validation. This vulnerability allows users to crash the program by constructing overly long strings, rendering it inoperable, and also enables attackers to craft carefully prepared payloads to achieve arbitrary command execution. |
|---|
| स्रोत | ⚠️ https://github.com/qazmn/my_cve/blob/main/Tenda/Tenda%20AC6%20%20v2.0_V15.03.06.51stack_overflow_formSetFirewallCfg.md |
|---|
| उपयोगकर्ता | b55t4ck (UID 89559) |
|---|
| सबमिशन | 31/08/2025 12:49 PM (1 वर्ष पहले) |
|---|
| संयम | 08/09/2025 07:02 AM (8 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 314780 [Tenda AC6 15.03.05.16 formSetFirewallCfg firewallEn बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|