| शीर्षक | Tenda M3 V1.0.0.13(4903) Heap-based Buffer Overflow |
|---|
| विवरण | The formSetInternetLanInfo handler in /bin/httpd calls formSetRemoteInternetLanInfo (under certain conditions) which is vulnerable to multiple heap overflows due to the complete absence of user input sanitization and bounds checking on parameters portIp, portMask, portGateWay, portDns, and portSecDns.
The vulnerability is in the memcpy() calls with no bounds checking.
The router must be configured with ac.workmode=master (default) for this vulnerability to be exploitable.
Send a crafted POST request to the /goform/setInternetLanInfo endpoint to trigger the heap overflow in formSetRemoteInternetLanInfo |
|---|
| स्रोत | ⚠️ https://github.com/dwBruijn/CVEs/blob/main/Tenda/setRemoteInternetLanInfo.md |
|---|
| उपयोगकर्ता | dwbruijn (UID 93926) |
|---|
| सबमिशन | 28/12/2025 05:46 PM (8 महीनों पहले) |
|---|
| संयम | 29/12/2025 09:01 AM (15 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338630 [Tenda M3 1.0.0.13(4903) setInternetLanInfo formSetRemoteInternetLanInfo portIp/portMask/portGateWay/portDns/portSecDns बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|