| 标题 | Tenda HG10 HG7_HG9_HG10re_300001138 Denial of Service |
|---|
| 描述 | The Boa web server's formURL function was analyzed using IDA Pro. The function entry address identified in the analysis is 0x0046F850. The Keywd parameter is obtained from the HTTP request and later copied into a fixed-size buffer. The unsafe copy operation does not verify that the destination buffer is large enough for the supplied value, so an overlong request can overwrite adjacent memory. |
|---|
| 来源 | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/bof-formURL-keywd.md |
|---|
| 用户 | sunnyyaya (UID 79818) |
|---|
| 提交 | 2026-07-19 16時34分 (2 月前) |
|---|
| 管理 | 2026-09-05 12時32分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 399304 [Tenda HG10 300001138 /boaform/admin/formURL Keywd/urlFQDN 内存损坏] |
|---|
| 积分 | 20 |
|---|