Description
A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | F456 | 1.0.0.5 | — |
References
- VDB-359676 | Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow vdb-entry technical-description
- VDB-359676 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #798474 | Tenda F456 v1.0.0.5 Stack-based Buffer Overflow third-party-advisory
- https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_139/README.md exploit
- https://www.tenda.com.cn/ product