| Название | Tenda HG10 HG7_HG9_HG10re_300001138 Denial of Service |
|---|
| Описание | The Boa web server's formURL function was analyzed using IDA Pro. The function entry address identified in the analysis is 0x0046F850. The Keywd parameter is obtained from the HTTP request and later copied into a fixed-size buffer. The unsafe copy operation does not verify that the destination buffer is large enough for the supplied value, so an overlong request can overwrite adjacent memory. |
|---|
| Источник | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/bof-formURL-keywd.md |
|---|
| Пользователь | sunnyyaya (UID 79818) |
|---|
| Представление | 19.07.2026 16:34 (2 месяцы назад) |
|---|
| Модерация | 05.09.2026 12:32 (2 months later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 399304 [Tenda HG10 300001138 /boaform/admin/formURL Keywd/urlFQDN повреждение памяти] |
|---|
| Баллы | 20 |
|---|