| 标题 | Tenda AC6 15.03.06.50 Stack-based Buffer Overflow |
|---|
| 描述 | A critical stack-based buffer overflow vulnerability has been discovered in the Tenda AC6 router firmware version 15.03.06.50. The vulnerability exists in the /goform/WifiGuestSet HTTP request handler and can be exploited by remote attackers to achieve code execution or cause denial of service through malformed HTTP requests. The vulnerability is triggered when processing requests containing the following parameters with excessive data lengths: shareSpeed. |
|---|
| 来源 | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/WifiGuestSet/WifiGuestSet.md |
|---|
| 用户 | z472421519 (UID 91218) |
|---|
| 提交 | 2025-10-11 19時52分 (12 月前) |
|---|
| 管理 | 2025-10-25 18時55分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 329895 [Tenda AC6 15.03.06.50 HTTP Request /goform/WifiGuestSet shareSpeed 内存损坏] |
|---|
| 积分 | 20 |
|---|