| 제목 | Tenda HG10 HG7_HG9_HG10re_300001138 Denial of Service |
|---|
| 설명 | The Boa web server's formURL function was analyzed using IDA Pro. The function entry address identified in the analysis is 0x0046F850. The Keywd parameter is obtained from the HTTP request and later copied into a fixed-size buffer. The unsafe copy operation does not verify that the destination buffer is large enough for the supplied value, so an overlong request can overwrite adjacent memory. |
|---|
| 원천 | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/bof-formURL-keywd.md |
|---|
| 사용자 | sunnyyaya (UID 79818) |
|---|
| 제출 | 2026. 07. 19. PM 04:34 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 05. PM 12:32 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 399304 [Tenda HG10 300001138 /boaform/admin/formURL Keywd/urlFQDN 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|