Submit #87727: Tenda AC23 formGetSysToolDDNS stack-based overflowinfo

TitleTenda AC23 formGetSysToolDDNS stack-based overflow
DescriptionVulnerability type:Buffer Overflow Product:Tenda AC23 Hardware version:V1.0 Software version:V16.03.07.45 Fireware download address: https://www.tenda.com.cn/download/detail-3420.html Affected component:/bin/httpd Function: formGetSysToolDDNS Attack type:Remote Attact vertor detail: https://github.com/jingping911/tendaAC23overflow/blob/main/README.md Imapct:Code Execution and Denial of Service Description:Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow in the formGetSysToolDDNS function.
Source⚠️ https://github.com/jingping911/tendaAC23overflow/blob/main/README.md
User
 wjp911 (UID 40747)
Submission02/11/2023 13:53 (3 years ago)
Moderation02/11/2023 18:00 (4 hours later)
StatusAccepted
VulDB entry220640 [Tenda AC23 16.03.07.45 /bin/httpd formSetSysToolDDNS/formGetSysToolDDNS out-of-bounds write]
Points20

Interested in the pricing of exploits?

See the underground prices here!