Submit #505693: Tenda ac10 V15.03.06.23 Buffer Overflowinfo

TitleTenda ac10 V15.03.06.23 Buffer Overflow
DescriptionTenda AC10 V1.0 V15.03.06.23 The devName argument in the formSetDeviceName function causes a stack overflow and passes it to the function "set_device_name" without any length checking. Once the ROP chain is built, malicious code can be executed.
Source⚠️ https://github.com/Raining-101/IOT_cve/blob/main/tenda_ac10_formSetDeviceName.md
User
 Raining101 (UID 81770)
Submission02/23/2025 09:12 (1 Year ago)
Moderation03/02/2025 21:13 (8 days later)
StatusDuplicate
VulDB entry231100 [Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn /goform/SetOnlineDevName devName stack-based overflow]
Points0

Want to know what is going to be exploited?

We predict KEV entries!