| 제목 | Tenda AC9 v1.0/V3.0 V15.03.06.42_multi Stack-based Buffer Overflow |
|---|
| 설명 | This vulnerability will cause the device's web service to continuously restart or fail to start, and it is difficult to restore factory settings. Even if the device is restarted, the vulnerability will still be triggered.
The `formGetDdosDefenceList` function has a stack overflow vulnerability.
The `security.ddos.map` configuration field has a stack overflow vulnerability.
An attacker can tamper with the value of `security.ddos.map` in the configuration file, turning it into an overly long string, which can cause a stack overflow and crash the web service. If the string is carefully constructed, it may lead to remote code execution. |
|---|
| 원천 | ⚠️ https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda3.md |
|---|
| 사용자 | jfkk (UID 79868) |
|---|
| 제출 | 2026. 01. 31. PM 03:31 (9 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 07. PM 06:28 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 344894 [Tenda AC9 15.03.06.42_multi formGetDdosDefenceList security.ddos.map 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|