Tenda Buffer Overflow (CVE-2020-13389; CVE-2020-13390; CVE-2020-13391; CVE-2020-13392; CVE-2020-13393)

A buffer overflow vulnerability exists in Tenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2020-13389

CVE-2020-13389 describes a buffer overflow in the httpd of multiple Tenda routers (AC6, AC9, AC15, AC18) where processing POSTed schedStartTime/schedEndTime parameters to /goform/openSchedWifi copies data into a local stack variable via strcpy, overwrite the return address and enable arbitrary co...