| 标题 | Tenda AX3 V16.03.12.10_CN Stack-based Buffer Overflow |
|---|
| 描述 | We found an stack overflow vulnerability in Tenda router with firmware which was released recently, allows remote attackers to crash the server.In the router's saveParentControlInfo function, deviceName is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the deviceName to execute arbitrary code. |
|---|
| 来源 | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_46/46.md |
|---|
| 用户 | Ziyue Xie (UID 89123) |
|---|
| 提交 | 2025-08-17 16時16分 (1 年前) |
|---|
| 管理 | 2025-08-28 17時19分 (11 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 321183 [Tenda AX3 16.03.12.10_CN saveParentControlInfo deviceName 内存损坏] |
|---|
| 积分 | 0 |
|---|