| शीर्षक | Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon Stack-based Buffer Overflow |
|---|
| विवरण | A stack‑based buffer‑overflow vulnerability (CWE‑121) exists in the Boa web server of Tenda HG10 ONT device, also affecting HG7 and HG9.
The web endpoint /boaform/formLoopBack accepts user‑controlled POST parameter Ethtype. The vulnerable handler retrieves Ethtype value via boaGetVar() and copies it to a fixed‑size stack buffer using strcpy() without adequate length checking.
An unauthenticated remote attacker can send a malicious POST request with an overly long Ethtype value to trigger stack memory corruption. Successful exploitation can crash the Boa web management service causing denial‑of‑service; given Boa runs as root, this vulnerability may potentially lead to remote code execution.
Affected firmware version: HG7_HG9_HG10re_300001138_en_xpon.
|
|---|
| स्रोत | ⚠️ https://github.com/Expl0rer-Ct/CVE/issues/1 |
|---|
| उपयोगकर्ता | Expl0rer.Ct (UID 100730) |
|---|
| सबमिशन | 06/09/2026 06:05 PM (26 दिन पहले) |
|---|
| संयम | 02/10/2026 05:49 AM (25 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 412917 [Tenda HG7/HG9/HG10 300001138_en_xpon Boa Web Server /boaform/formLoopBack boaGetVar Ethtype बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|