Submeter #505693: Tenda ac10 V15.03.06.23 Buffer Overflow

Tenda AC10 V1.0 V15.03.06.23 The devName argument in the formSetDeviceName function causes a stack overflow and passes it to the function "set_device_name" without any length checking. Once the ROP chain is built, malicious code can be executed.

• Fonte: ⚠️ https://github.com/Raining-101/IOT_cve/blob/main/tenda_ac10_formSetDeviceName.md
• Utilizador: Raining101 (UID 81770)
• Submissão: 23/02/2025 09h12 (há 1 Ano)
• Moderação: 02/03/2025 21h13 (8 days later)
• Estado: Duplicado
• Entrada VulDB: 231100 [Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn /goform/SetOnlineDevName devName Excesso de tampão]
• Pontos: 0