Submit #609795: Tenda AC9 V1.0 V15.03.02.13 stack overflowinfo

TitleTenda AC9 V1.0 V15.03.02.13 stack overflow
DescriptionThe Tenda AC9 V1.0 V15.03.02.13 firmware has a stack overflow vulnerability in the formWifiBasicSet function. The s1 variable receives the security_5g parameter from a POST request and is later assigned to the dest variable, which is fixed at 256 bytes.
Source⚠️ https://candle-throne-f75.notion.site/Tenda-AC9-formWifiBasicSet_security_5g-227df0aa118580c586bdd240d6dea794
User
 ysnysnysn0121 (UID 86328)
Submission07/05/2025 13:03 (1 Year ago)
Moderation07/11/2025 13:12 (6 days later)
StatusDuplicate
VulDB entry254582 [Tenda AC9 15.03.06.42_multi formWifiBasicSet stack-based overflow]
Points0

Do you know our Splunk app?

Download it now for free!