| शीर्षक | Tenda A15 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| विवरण | In the web management interface of the Tenda A15 V15.13.07.13 router, the /cgi-bin/UploadCfg interface contains a security vulnerability when processing firmware or configuration upload requests. This flaw originates from the underlying parsing function, webCgiGetUploadFile, which fails to perform effective bounds checking on the boundary field of multipart/form-data messages.
An attacker can construct a malicious HTTP POST request containing an excessively long boundary string. When the server attempts to copy this string into a fixed-length buffer on the stack (approximately 68 bytes), it triggers a stack-based buffer overflow. |
|---|
| स्रोत | ⚠️ https://github.com/942384053/cve/issues/3 |
|---|
| उपयोगकर्ता | 942384053 (UID 94603) |
|---|
| सबमिशन | 08/03/2026 02:23 PM (7 महीनों पहले) |
|---|
| संयम | 22/03/2026 09:34 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 352404 [Tenda A15 15.13.07.13 /cgi-bin/UploadCfg file बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|