Tenda AX3 Router Buffer Overflow (CVE-2021-46393; CVE-2021-46394)

A stack buffer overflow vulnerability exists in Tenda AX3 Router. Successful exploitation of this vulnerability could result in a remote code execution with carefully crafted overflow data...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

CVE-2021-46394

CVE-2021-46394 describes a stack buffer overflow in Tenda-AX3 router, caused by taking the http parameter startIp into v13 and copying it onto the stack via sscanf in formSetPPTPServerCfg handling. Exploitation path: POST to /goform/SetPptpServerCfg with crafted startIp data can lead to remote co...