| Title | Tenda AC10 <=V15.03.06.47 Buffer Overflow |
|---|
| Description | A buffer overflow vulnerability exists in the formSetPPTPServer function of the Tenda AC10 router. By sending a crafted HTTP request with a malicious startIp parameter, a remote attacker can trigger a stack overflow that leads to a segmentation fault. This may result in denial-of-service (DoS) or potentially allow further exploitation. |
|---|
| Source | ⚠️ https://github.com/pfwqdxwdd/cve/blob/main/4.md |
|---|
| User | pfwqdxwdd (UID 86094) |
|---|
| Submission | 06/03/2025 15:12 (1 Year ago) |
|---|
| Moderation | 06/04/2025 13:20 (22 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 311115 [Tenda AC10 up to 15.03.06.47 HTTP /goform/SetPptpServerCfg formSetPPTPServer startIp/endIp buffer overflow] |
|---|
| Points | 18 |
|---|