| Title | Tenda AC15 V1.0 V15.03.05.19_multi stack overflow |
|---|
| Description | The Tenda AC15 V1.0 V15.03.05.19_multi firmware has a stack overflow vulnerability in the formWifiBasicSet function. The v54 variable receives the security parameter from a POST request and is later copied into the s variable, which is fixed at 256 bytes. However, since the user can control the input of security, the statement strcpy(s, v54); can cause a buffer overflow. |
|---|
| Source | ⚠️ https://candle-throne-f75.notion.site/Tenda-AC15-formWifiBasicSet_security-227df0aa1185802ea480da1ac6652724 |
|---|
| User | ysnlrh (UID 86327) |
|---|
| Submission | 07/12/2025 08:32 (1 Year ago) |
|---|
| Moderation | 07/12/2025 19:07 (11 hours later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 206867 [Tenda AC15 15.03.05.18 httpd /goform/formWifiBasicSet stack-based overflow] |
|---|
| Points | 0 |
|---|