| शीर्षक | Tenda AX1803 V1.0.0.1 Stack-based Buffer Overflow |
|---|
| विवरण | Tenda AX1803 firmware v1.0.0.1 contains a stack overflow in fromGetWifiGusetBasic via parameter wlan0.3_bss_wpapsk_key, which can cause memory corruption and enable remote code execution.
The fromSetWifiGusetBasic reads the guestWrlPwd parameter from an HTTP POST. It then invokes SetValue to write the value into the CFM service with the key "wlan0.3_bss_wpapsk_key".
The fromGetWifiGusetBasic function invokes GetValue with the key "wlan0.3_bss_wpapsk_key" to get the value from CFM. The value is stored in the local buffer without length validation. Since this value is derived from user-controlled POST input (guestWrlPwd), this can cause a buffer overflow and allow a remote attacker to execute arbitrary code. |
|---|
| स्रोत | ⚠️ https://river-brow-763.notion.site/Tenda-AX1803-Buffer-Overflow-in-fromGetWifiGusetBasic-2e3a595a7aef80a78225db34317daa40#2e3a595a7aef801ab517e4af5631227a |
|---|
| उपयोगकर्ता | wlupus (UID 94367) |
|---|
| सबमिशन | 10/01/2026 05:33 PM (9 महीनों पहले) |
|---|
| संयम | 22/01/2026 08:51 AM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 342305 [Tenda AX1803 1.0.0.1 /goform/WifiGuestSet fromGetWifiGuestBasic बफ़र ओवरफ़्लो] |
|---|
| अंक | 17 |
|---|