Submit #512295: Tenda Ac7 V15.03.06.44 Buffer Overflowinfo

TitleTenda Ac7 V15.03.06.44 Buffer Overflow
DescriptionA buffer overflow vulnerability exists in TenDa AC7 V15.03.06.44 firmware feature.This vulnerability lies in the page /goform/fast_setting_wifi_set, form_fast_setting_wifi_set function copies the contents of the string to cmd_buf without performing a boundary check. Therefore, if the length is longer than 512 bytes, it can cause a buffer overflow, overwriting the memory area behind the array, which can cause the program to crash and trigger this security vulnerability.
Source⚠️ https://github.com/Raining-101/IOT_cve/blob/main/tenda-ac7form_fast_setting_wifi_set%20timeZone.md
User
 Raining101 (UID 81770)
Submission03/02/2025 06:23 (2 years ago)
Moderation03/06/2025 10:12 (4 days later)
StatusDuplicate
VulDB entry238359 [Tenda AC7/AC9 fast_setting_wifi_set ssid stack-based overflow]
Points0

Do you want to use VulDB in your project?

Use the official API to access entries easily!