| Название | Tenda W12 V3.0.0.7(4763) Stack-based Buffer Overflow |
|---|
| Описание | # Stack Overflow Vulnerability in the `set_local_time_0` Function of Tenda W12
## Basic Information
- Vendor: Tenda
- Product: W12
- Firmware Version: V3.0.0.7(4763)
- Firmware Release Date: 2026-03-04
## Vulnerability Overview
A stack overflow vulnerability exists in the `set_local_time_0` function of the `/bin/httpd` binary in Tenda W12 V3.0.0.7(4763). An attacker can remotely trigger the vulnerability by sending a specially crafted request.
## Detailed Analysis
The `set_local_time_0` function is called from the `cgiSysLogin` function.
A vulnerability exists in the parsing of the `time` field from the JSON request inside `set_local_time_0`, which results in a stack overflow.
PoC request:
```
{
"sysLogin": {
"password": "Admin123",
"time": "2026;04;26;12;00;"+"A"*0x1000
}
}
```
## Impact
- Stack Overflow
- May lead to:
- Device crash (DoS)
- Potential remote code execution (RCE)
|
|---|
| Источник | ⚠️ http://cdn2.v50to.cc/set_local_time_0_overflow.zip |
|---|
| Пользователь | CookedMelon (UID 52513) |
|---|
| Представление | 06.05.2026 08:37 (29 дни назад) |
|---|
| Модерация | 30.05.2026 18:47 (24 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 367473 [Tenda W12 3.0.0.7(4763) /bin/httpd set_local_time_0 Время повреждение памяти] |
|---|
| Баллы | 17 |
|---|