| タイトル | Tenda AC6V2.0 Tenda AC6V2.0 V15.03.06.23_multi Stack-based Buffer Overflow |
|---|
| 説明 | A vulnerability was determined in Tenda AC6V2.0 V15.03.06.23_multi. Specifically, the function fromDhcpListClient within the httpd binary is affected. This function improperly handles user-supplied input passed through the list1 argument or page argument, causing a stack-based buffer overflow. By supplying an overly long string to the list1 parameter or page parameter via a crafted HTTP request, an attacker can overwrite the return address on the stack. This vulnerability can be exploited remotely, leading to denial of service or, potentially, arbitrary code execution with root privileges. |
|---|
| ソース | ⚠️ https://github.com/Axelioc/CVE/blob/main/Tenda/AC6V2.0/fromDhcpListClient.md |
|---|
| ユーザー | Haaalion (UID 89556) |
|---|
| 送信 | 2026年06月01日 02:54 (4 月 ago) |
|---|
| モデレーション | 2026年06月28日 20:40 (28 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 230077 [Tenda AC6 US_AC6V1.0BR_V15.03.05.19 fromDhcpListClient メモリ破損] |
|---|
| ポイント | 0 |
|---|