提出 #636529: Tenda AX3 V16.03.12.10_CN Stack-based Buffer Overflow情報

タイトルTenda AX3 V16.03.12.10_CN Stack-based Buffer Overflow
説明We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's SetSysTimeCfg function, ntpServer is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ntpServer to execute arbitrary code.
ソース⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_45/45.md
ユーザー
 Ziyue Xie (UID 89123)
送信2025年08月17日 16:14 (1 年 ago)
モデレーション2025年08月28日 17:17 (11 days later)
ステータス重複
VulDBエントリ321174 [Tenda AX3 16.03.12.10_CN fromSetSysTime ntpServer メモリ破損]
ポイント0

Do you want to use VulDB in your project?

Use the official API to access entries easily!