Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_10/10.md | broken link |
https://www.tenable.com/cve/CVE-2021-45993 | third party advisory |