| タイトル | Tenda AC9 v1.0/V3.0 V15.03.06.42_multi Stack-based Buffer Overflow |
|---|
| 説明 | This vulnerability will cause the device's web service to continuously restart or fail to start, and it is difficult to restore factory settings. Even if the device is restarted, the vulnerability will still be triggered.
The `formGetDdosDefenceList` function has a stack overflow vulnerability.
The `security.ddos.map` configuration field has a stack overflow vulnerability.
An attacker can tamper with the value of `security.ddos.map` in the configuration file, turning it into an overly long string, which can cause a stack overflow and crash the web service. If the string is carefully constructed, it may lead to remote code execution. |
|---|
| ソース | ⚠️ https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda3.md |
|---|
| ユーザー | jfkk (UID 79868) |
|---|
| 送信 | 2026年01月31日 15:31 (8 月 ago) |
|---|
| モデレーション | 2026年02月07日 18:28 (7 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 344894 [Tenda AC9 15.03.06.42_multi formGetDdosDefenceList security.ddos.map メモリ破損] |
|---|
| ポイント | 20 |
|---|