| शीर्षक | Tenda RouterOS AC9V1.0BR_V15.03.2.13 Stack-based Buffer Overflow |
|---|
| विवरण | A vulnerability was found in Tenda AC9 15.03.02.13. The vulnerability exists in the /goform/GetParentControlInfo HTTP request handler and can be exploited remotely by unauthenticated attackers to achieve arbitrary code execution or cause denial of service conditions.
A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of /bin/httpd. The function directly copies the user-supplied mac parameter using strcpy() without performing sufficient length validation. An attacker can exploit this issue by supplying an overly long mac parameter, potentially causing memory corruption and leading to arbitrary code execution. |
|---|
| स्रोत | ⚠️ https://github.com/ZaneBoden/CVEs/blob/main/Tenda-AC9-GetParentControlInfo.md |
|---|
| उपयोगकर्ता | hodor (UID 101043) |
|---|
| सबमिशन | 07/09/2026 03:48 AM (29 दिन पहले) |
|---|
| संयम | 02/10/2026 05:54 AM (25 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 238365 [Tenda AC9/AC5 GetParentControlInfo mac बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|