提出 #659641: Shenzhen Tenda Technology Co., Ltd. Tenda AC10 v16.03.10.20 Firmware Tenda AC10 v16.03.10.20 Stack-based Buffer Overflow情報

タイトルShenzhen Tenda Technology Co., Ltd. Tenda AC10 v16.03.10.20 Firmware Tenda AC10 v16.03.10.20 Stack-based Buffer Overflow
説明The fromSetRouteStatic function in Tenda AC10 v4.0 V16.03.10.20 firmware contains a stack overflow vulnerability. The vulnerability arises because the save_staticroute_data function does not impose effective restrictions on the length of the list parameter provided by the user. An attacker can exploit this issue by constructing an overly long string, which may trigger a stack overflow and potentially lead to arbitrary code execution or device crash.
ソース⚠️ https://github.com/alc9700jmo/CVE/issues/17
ユーザー
 alc9700 (UID 79368)
送信2025年09月21日 12:39 (7 月 ago)
モデレーション2025年09月26日 14:02 (5 days later)
ステータス重複
VulDBエントリ257081 [Tenda AC10 16.03.10.13 SetStaticRouteCfg fromSetRouteStatic list メモリ破損]
ポイント0

Do you want to use VulDB in your project?

Use the official API to access entries easily!