| 标题 | Tenda AC6V2.0 Tenda AC6V2.0 V15.03.06.23_multi Stack-based Buffer Overflow |
|---|
| 描述 | A vulnerability was determined in Tenda AC6V2.0 V15.03.06.23_multi. Specifically, the function form_fast_setting_wifi_set within the httpd binary is affected. This function improperly handles user-supplied input passed through the ssid argument, causing a stack-based buffer overflow. By supplying an overly long string to the ssid parameter via a crafted HTTP request, an attacker can overwrite the return address on the stack. This vulnerability can be exploited remotely, leading to denial of service or, potentially, arbitrary code execution with root privileges. |
|---|
| 来源 | ⚠️ https://github.com/Axelioc/CVE/blob/main/Tenda/AC6V2.0/form_fast_setting_wifi_set.md |
|---|
| 用户 | Haaalion (UID 89556) |
|---|
| 提交 | 2026-05-31 16時19分 (4 月前) |
|---|
| 管理 | 2026-06-28 20時21分 (28 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 224831 [Tenda AC6 15.03.05.09_multi form_fast_setting_wifi_set ssid 内存损坏] |
|---|
| 积分 | 0 |
|---|