Stack overflow

2024-01-2616:15:00

PRIOn knowledge base

www.prio-n.com

critical

buffer overflow

tenda ac10u

remote attack

exploit disclosure

vdb-252135

no vendor response

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.8%

JSON

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
ac10u_firmwareeq15.3.649-multitde1

CPE	Name	Operator	Version
	ac10u_firmware	eq	15.3.649-multitde1

References

github.com/yaoyue123/iot/blob/main/Tenda/AC10U/fromSetWirelessRepeat.md

vuldb.com/?ctiid.252135

vuldb.com/?id.252135