提出 #608865: Tenda O3V2 1.0.0.12(3880) Stack-based Buffer Overflow情報

タイトルTenda O3V2 1.0.0.12(3880) Stack-based Buffer Overflow
説明We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's fromSpeedTestSet function, destIP is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the destIP to execute arbitrary code.
ソース⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_52/52.md
ユーザー
 pjq123 (UID 86618)
送信2025年07月04日 04:12 (10 月 ago)
モデレーション2025年07月10日 09:49 (6 days later)
ステータス承諾済み
VulDBエントリ315879 [Tenda O3V2 1.0.0.12(3880) httpd /goform/setRateTest fromSpeedTestSet destIP メモリ破損]
ポイント18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!