| 标题 | Shenzhen Tenda Technology Co., Ltd. Tenda AC10 V4.0 V16.03.10.13 Router V16.03.10.13 Stack-based Buffer Overflow |
|---|
| 描述 | The Tenda AC10 V4.0 (V16.03.10.13) router is affected by a stack overflow vulnerability. Attackers can exploit this vulnerability by sending specially crafted requests, leading to a stack overflow that may crash the router or disrupt its services.
The vulnerability resides in the ShutdownSetAdd function. Specifically, the program fails to properly restrict the length of user-supplied input for the list parameter, resulting in a stack overflow when calling scanf.
|
|---|
| 来源 | ⚠️ https://github.com/LxxxtSec/CVE/blob/main/CVE_1.md |
|---|
| 用户 | Lxxxt (UID 83119) |
|---|
| 提交 | 2025-03-25 08時01分 (2 年前) |
|---|
| 管理 | 2025-04-03 08時58分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 303107 [Tenda AC10 16.03.10.13 /goform/ShutdownSetAdd list 内存损坏] |
|---|
| 积分 | 20 |
|---|