| タイトル | Tenda Tenda A15 V15.13.07.13 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| 説明 | Tenda AC15 is a dual band three gigabit wireless router suitable for households with fiber optic cables up to 1000 megabits. It supports gigabit ports, intelligent frequency band selection, parental control, and other functions. Shenzhen Jixiang Tengda Technology Co., Ltd. AC15 has a binary vulnerability that attackers can exploit to cause stack overflow.
The formSetDevNetName function, which uses websGetVar to retrieve the mac parameter and passes it as the second argument to the set_device_name function.
In the set_device_name function, the sprintf function does not validate the length of the mac parameter, directly writing it into the buffer.
1.Device Crash: The target device crashes, causing a Denial of Service (DoS).
2.Arbitrary Code Execution: Through buffer overflow, the attacker can execute arbitrary code, taking full control of the device.
3.Further Exploitation: The device can be used as a springboard to attack other targets within the internal network. |
|---|
| ソース | ⚠️ https://pan.baidu.com/s/1DBDf27oCTIMkW-PSZwg02Q?pwd=tara |
|---|
| ユーザー | polaris0x1 (UID 67906) |
|---|
| 送信 | 2025年01月17日 14:48 (2 年 ago) |
|---|
| モデレーション | 2025年01月18日 08:45 (18 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 292527 [Tenda AC15 15.13.07.13 /goform/SetDevNetName formSetDevNetName mac メモリ破損] |
|---|
| ポイント | 20 |
|---|