Description
A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | AC15 | 15.03.05.0, 15.03.05.1, 15.03.05.2, 15.03.05.3, 15.03.05.4, 15.03.05.5, 15.03.05.6, 15.03.05.7, 15.03.05.8, 15.03.05.9, 15.03.05.10, 15.03.05.11, 15.03.05.12, 15.03.05.13, 15.03.05.14, 15.03.05.15, 15.03.05.16, 15.03.05.17, 15.03.05.18, 15.03.05.19 | — |
References
- VDB-305609 | Tenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflow vdb-entry technical-description
- VDB-305609 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #553703 | Shenzhen Tenda Technology Co.,Ltd. AC15 <=V15.03.05.19 Buffer Overflow third-party-advisory
- https://github.com/CH13hh/cve/tree/AC15WifiExtraSet exploit
- https://www.tenda.com.cn/ broken-link product