| 标题 | Tenda AC6 V2.0 15.03.06.50 Stack-based Buffer Overflow |
|---|
| 描述 | A buffer overflow vulnerability has been identified in the Tenda AC6 V2.0 15.03.06.50 router firmware that allows remote attackers to potentially execute arbitrary code or cause denial of service through malformed HTTP requests. The vulnerable code path processes HTTP requests to the /goform/NatStaticSetting. When page is specified with excessive data, the buffer overflow occurs during sprintf.
|
|---|
| 来源 | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/NatStaticSetting/NatStaticSetting.md |
|---|
| 用户 | z472421519 (UID 91218) |
|---|
| 提交 | 2025-10-11 22時49分 (12 月前) |
|---|
| 管理 | 2025-10-25 18時54分 (14 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 314188 [Tenda AC6 直到 15.03.05.19 fromNatStaticSetting page 内存损坏] |
|---|
| 积分 | 0 |
|---|