Description
A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | AC10 | 16.03.10.13 | — |
References
- VDB-330914 | Tenda AC10 SysRunCmd formSysRunCmd buffer overflow vdb-entry technical-description
- VDB-330914 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #678889 | tenda AC10V4.0 V16.03.10.13 buffer overflow third-party-advisory
- https://www.yuque.com/ba1ma0-an29k/nnxoap/rg8eug0zk8ep3zne?singleDoc broken-link
- https://pan.baidu.com/s/1Jl1zy5niigg1XYm8ZCh_Lg exploit
- https://www.tenda.com.cn/ product