| 제목 | Tenda M3 V1.0.0.13(4903) Heap-based Buffer Overflow |
|---|
| 설명 | The formSetVlanPolicy handler in /bin/httpd is vulnerable to heap overflow due to the absence of user input sanitization and bounds checking on parameter qvlan_truck_port.
The vulnerability is in the memcpy() call performed using parameter qvlan_truck_port controlled by the user with no bounds checking.
Send a POST request to the /goform/setVlanPolicyData endpoint to trigger the heap overflow in formSetVlanPolicy |
|---|
| 원천 | ⚠️ https://github.com/dwBruijn/CVEs/blob/main/Tenda/setVlanPolicy.md |
|---|
| 사용자 | dwbruijn (UID 93926) |
|---|
| 제출 | 2025. 12. 28. PM 05:26 (9 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 29. AM 09:01 (16 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 338626 [Tenda M3 1.0.0.13(4903) setVlanPolicyData formSetVlanPolicy qvlan_truck_port 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|