| शीर्षक | Tenda AC10 V4 US_AC10V4.0si_V16.03.10.10_multi_TDE01 Stack-based Buffer Overflow |
|---|
| विवरण | Static analysis of /bin/httpd in Tenda AC10 V4 firmware V16.03.10.10 identified 229 call sites to GetValue() which reads NVRAM values into caller-provided buffers without length validation. Multiple goform handlers use fixed-size stack buffers of 16 to 64 bytes as destinations including fromSysToolChangePwd (36 bytes), formSetMacFilterCfg (32 bytes), formGetIPv6status, formWanParameterSetting, formWifiBasicSet, and fromAdvSetLanip. The absence of stack canaries and fixed binary addresses make exploitation of any vulnerable call site reliable. |
|---|
| स्रोत | ⚠️ https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/HIGH-01-getvalue-229-callers.md |
|---|
| उपयोगकर्ता | CoreNode (UID 96566) |
|---|
| सबमिशन | 18/03/2026 04:35 PM (7 महीनों पहले) |
|---|
| संयम | 04/04/2026 03:28 PM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 355314 [Tenda AC10 16.03.10.10_multi_TDE01 /bin/httpd fromSysToolChangePwd बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|