Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the filePath parameter of the formExpandDlnaFile function...

The vulnerability of MiniDLNA media server software lies in the lack of a mechanism for checking the size of copied data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MiniDLNA media server software is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...