| 标题 | Tenda AX3 V16.03.12.10_CN Stack-based Buffer Overflow |
|---|
| 描述 | We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's SetSysTimeCfg function, ntpServer is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ntpServer to execute arbitrary code. |
|---|
| 来源 | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_45/45.md |
|---|
| 用户 | Ziyue Xie (UID 89123) |
|---|
| 提交 | 2025-08-17 16時14分 (1 年前) |
|---|
| 管理 | 2025-08-28 17時17分 (11 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 321174 [Tenda AX3 16.03.12.10_CN fromSetSysTime ntpServer 内存损坏] |
|---|
| 积分 | 0 |
|---|