| शीर्षक | Tenda AC6V2.0 Tenda AC6V2.0 V15.03.06.23_multi Stack-based Buffer Overflow |
|---|
| विवरण | A vulnerability was determined in Tenda AC6V2.0 V15.03.06.23_multi. Specifically, the formSetQosBand CGI function passes user-supplied input from the list argument down to the internal function setQosMiblist within the httpd binary. The setQosMiblist function improperly handles this input, causing a stack-based buffer overflow. By supplying an overly long string to the list parameter via a crafted HTTP request, an attacker can overwrite the return address on the stack. This vulnerability can be exploited remotely, leading to denial of service or, potentially, arbitrary code execution with root privileges. |
|---|
| स्रोत | ⚠️ https://github.com/Axelioc/CVE/blob/main/Tenda/AC6V2.0/setQosMiblist.md |
|---|
| उपयोगकर्ता | Haaalion (UID 89556) |
|---|
| सबमिशन | 31/05/2026 05:00 PM (4 महीनों पहले) |
|---|
| संयम | 28/06/2026 08:23 PM (28 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 314781 [Tenda AC6 15.03.05.16 formSetQosBand list बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|