| 标题 | Tenda Tenda A15 V15.13.07.13 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| 描述 | Tenda AC15 is a dual band three gigabit wireless router suitable for households with fiber optic cables up to 1000 megabits. It supports gigabit ports, intelligent frequency band selection, parental control, and other functions. Shenzhen Jixiang Tengda Technology Co., Ltd. AC15 has a binary vulnerability that attackers can exploit to cause stack overflow.
The formSetDevNetName function, which uses websGetVar to retrieve the mac parameter and passes it as the second argument to the set_device_name function.
In the set_device_name function, the sprintf function does not validate the length of the mac parameter, directly writing it into the buffer.
1.Device Crash: The target device crashes, causing a Denial of Service (DoS).
2.Arbitrary Code Execution: Through buffer overflow, the attacker can execute arbitrary code, taking full control of the device.
3.Further Exploitation: The device can be used as a springboard to attack other targets within the internal network. |
|---|
| 来源 | ⚠️ https://pan.baidu.com/s/1DBDf27oCTIMkW-PSZwg02Q?pwd=tara |
|---|
| 用户 | polaris0x1 (UID 67906) |
|---|
| 提交 | 2025-01-17 14時48分 (2 年前) |
|---|
| 管理 | 2025-01-18 08時45分 (18 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 292527 [Tenda AC15 15.13.07.13 /goform/SetDevNetName formSetDevNetName mac 内存损坏] |
|---|
| 积分 | 20 |
|---|