Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://brief-nymphea-813.notion.site/Vul1-A15-bof-SysToolChangePwd-6a66d9f7a7e748deb8ebed544931bd29 | third party advisory exploit |