| 标题 | Tenda A18 V15.13.07.13 Stack-based Buffer Overflow |
|---|
| 描述 | A security flaw exists in the web management interface of the Tenda A18 router. Specifically, the formWifiBasicSet function, which handles WiFi basic setting requests, fails to properly validate the length of user-supplied input parameters. By sending a specially crafted malicious POST request, an attacker can leverage an unsafe strcpy function to trigger a stack overflow, leading to a Denial of Service (DoS) or Remote Code Execution (RCE). |
|---|
| 来源 | ⚠️ https://github.com/master-abc/cve/issues/41 |
|---|
| 用户 | 942384053 (UID 94603) |
|---|
| 提交 | 2026-02-10 17時39分 (8 月前) |
|---|
| 管理 | 2026-02-21 16時10分 (11 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 237170 [Tenda A18 15.13.07.09 formWifiBasicSet security 内存损坏] |
|---|
| 积分 | 0 |
|---|