Submit #608857: Tenda O3V2 1.0.0.12(3880) Stack-based Buffer Overflowinfo

TitleTenda O3V2 1.0.0.12(3880) Stack-based Buffer Overflow
DescriptionWe found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's fromSysToolTime function, time is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the time to execute arbitrary code.
Source⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_49/49.md
User
 pjq123 (UID 86618)
Submission07/04/2025 04:11 (10 months ago)
Moderation07/10/2025 09:49 (6 days later)
StatusAccepted
VulDB entry315876 [Tenda O3V2 1.0.0.12(3880) httpd /goform/setSysTimeInfo fromSysToolTime stack-based overflow]
Points18

Do you need the next level of professionalism?

Upgrade your account now!