Description
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | AC8 | 16.03.34.06 | — |
References
- VDB-326201 | Tenda AC8 SetServerConfig formSetServerConfig buffer overflow vdb-entry technical-description
- VDB-326201 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #664065 | Shenzhen Tenda Technology Co., Ltd. Tenda AC8v4 Router Tenda AC8v4 (V16.03.34.06) Buffer Overflow third-party-advisory
- https://github.com/alc9700jmo/CVE/issues/19 exploit issue-tracking
- https://www.tenda.com.cn/ product