Submit #647527: Tenda AC1206 AC1206V1.0RTL_V15.03.06.23 Stack-based Buffer Overflowinfo

TitleTenda AC1206 AC1206V1.0RTL_V15.03.06.23 Stack-based Buffer Overflow
DescriptionA Stack-Based Buffer Overflow in Tenda AC1206 1200M 11ac Wi-Fi 5 Router (AC1206V1.0RTL_V15.03.06.23). Due to the lack of restrictions on certain parameters in the `check_param_changed` function and a lack of proper bounds checking, a stack overflow may occur. An unauthenticated remote attacker can cause a remote code execution(RCE) or remote denial of service (DoS) attack by crafting HTTP requests.
Source⚠️ https://github.com/M4st3rYi/IoTVulPocs/blob/main/Tenda/AC1206/fromAdvSetMacMtuWan.md
User
 Anonymous User
Submission09/04/2025 06:49 (10 months ago)
Moderation09/14/2025 12:17 (10 days later)
StatusAccepted
VulDB entry323866 [Tenda AC1206 15.03.06.23 HTTP Request /goform/AdvSetMacMtuWa check_param_changed wanMTU stack-based overflow]
Points20

Do you need the next level of professionalism?

Upgrade your account now!