| Название | TRENDnet TEW-432BRP 3.10B20 Stack-based Buffer Overflow |
|---|
| Описание | In formTcpipSetup function, name is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the name to execute arbitrary code.As you can see here, the input has not been checked. The parameter is directly copy to a local variable placed on the stack, which overrides the return address of the function, causing buffer overflow. |
|---|
| Источник | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md |
|---|
| Пользователь | pjqwudi (UID 85106) |
|---|
| Представление | 15.09.2026 05:33 (2 месяцы назад) |
|---|
| Модерация | 12.10.2026 14:00 (27 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 416890 [TRENDnet TEW-432BRP 3.10B20 /goform/formTcpipSetup name повреждение памяти] |
|---|
| Баллы | 20 |
|---|