| शीर्षक | Tenda M3 V1.0.0.13(4903) Stack-based Buffer Overflow |
|---|
| विवरण | The formSetAdPushInfo handler in /bin/httpd is vulnerable to multiple stack overflows due to the absence of user input sanitization and bounds checking on parameters mac and terminal which can lead to corruption of data on the stack, hijacking of control flow, and DoS. The attack can be performed remotely.
The vulnerability is in the memcpy() calls with no bounds checking.
Send a POST request to the /goform/setAdPushInfo endpoint to trigger the stack overflow |
|---|
| स्रोत | ⚠️ https://github.com/dwBruijn/CVEs/blob/main/Tenda/setAdPushInfo.md |
|---|
| उपयोगकर्ता | dwbruijn (UID 93926) |
|---|
| सबमिशन | 28/12/2025 05:36 PM (8 महीनों पहले) |
|---|
| संयम | 29/12/2025 09:01 AM (15 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338628 [Tenda M3 1.0.0.13(4903) /goform/setAdPushInfo formSetAdPushInfo mac/terminal बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|