| Title | Shenzhen Tenda Technology Co., Ltd. Tenda AC10 V4.0 V16.03.10.13 Router V16.03.10.13 Stack-based Buffer Overflow |
|---|
| Description | The Tenda AC10 V4.0 (V16.03.10.13) router is affected by a stack overflow vulnerability. Attackers can exploit this vulnerability by sending specially crafted requests, leading to a stack overflow that may crash the router or disrupt its services.
The vulnerability resides in the ShutdownSetAdd function. Specifically, the program fails to properly restrict the length of user-supplied input for the list parameter, resulting in a stack overflow when calling scanf.
|
|---|
| Source | ⚠️ https://github.com/LxxxtSec/CVE/blob/main/CVE_1.md |
|---|
| User | Lxxxt (UID 83119) |
|---|
| Submission | 03/25/2025 08:01 (1 Year ago) |
|---|
| Moderation | 04/03/2025 08:58 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 303107 [Tenda AC10 16.03.10.13 /goform/ShutdownSetAdd list stack-based overflow] |
|---|
| Points | 20 |
|---|