| Title | Tenda O3V2 1.0.0.12(3880) Stack-based Buffer Overflow |
|---|
| Description | We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's fromPingResultGet function, destIP is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the destIP to execute arbitrary code. |
|---|
| Source | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_51/51.md |
|---|
| User | pjq123 (UID 86618) |
|---|
| Submission | 07/04/2025 04:12 (1 Year ago) |
|---|
| Moderation | 07/10/2025 09:49 (6 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 315878 [Tenda O3V2 1.0.0.12(3880) httpd /goform/setPing fromPingResultGet destIP stack-based overflow] |
|---|
| Points | 18 |
|---|