| 标题 | Tenda i3 V1.0.0.7(3856) Buffer Overflow |
|---|
| 描述 | A stack-based buffer overflow vulnerability exists in Tenda i3 V1.0.0.7(3856) in the function formWifiMacFilterGet at /goform/WifiMacFilterGet. The POST parameter index is copied into a fixed-length stack buffer without verifying its size. A remote attacker who can access the management interface may trigger the vulnerability by sending an excessively long index value, leading to stack corruption, denial of service, and possible arbitrary code execution within the router web server process. |
|---|
| 来源 | ⚠️ https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-v1.0.0.7(3856)-formWifiMacFilterGet-index-buffer-overflow |
|---|
| 用户 | m202572177 (UID 95972) |
|---|
| 提交 | 2026-03-12 03時40分 (7 月前) |
|---|
| 管理 | 2026-03-27 13時49分 (15 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 349770 [Tenda i3 1.0.0.6(2204) /goform/WifiMacFilterGet formWifiMacFilterGet index 内存损坏] |
|---|
| 积分 | 0 |
|---|