| शीर्षक | Shenzhen Tenda Technology Co., Ltd. Tenda AC15 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| विवरण | Tenda A15 is a dual-band wireless router launched by Shenzhen Tenda Technology Co., Ltd., designed for gigabit fiber optic households. A stack overflow vulnerability exists in version V15.13.07.13 of this product. The vulnerability originates from the formSetDevNetName function, which fails to properly validate the length of the mac parameter. This allows an attacker to trigger a buffer overflow via a specially crafted request, potentially achieving Remote Code Execution (RCE).
This vulnerability allows an attacker to achieve the following outcomes via a carefully crafted HTTP request:
Device Crash: The target device crashes, causing a Denial of Service (DoS).
Arbitrary Code Execution: Through buffer overflow, the attacker can execute arbitrary code, taking full control of the device.
Further Exploitation: The device can be used as a springboard to attack other targets within the internal network. |
|---|
| स्रोत | ⚠️ https://github.com/alc9700jmo/CVE/issues/18 |
|---|
| उपयोगकर्ता | alc9700 (UID 79368) |
|---|
| सबमिशन | 26/09/2025 05:40 PM (1 वर्ष पहले) |
|---|
| संयम | 27/09/2025 07:45 PM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 292527 [Tenda AC15 15.13.07.13 /goform/SetDevNetName formSetDevNetName mac बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|