Описание
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-9023
- https://github.com/zezhifu1/cve_report/blob/main/AC18/formsetschedled.md
- https://github.com/zezhifu1/cve_report/blob/main/AC7/formsetschedled.md
- https://vuldb.com/?ctiid.320088
- https://vuldb.com/?id.320088
- https://vuldb.com/?submit.629692
- https://vuldb.com/?submit.629696
- https://www.tenda.com.cn
Связанные уязвимости
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Уязвимость функции formSetSchedLed файла /goform/SetLEDCfg микропрограммного обеспечения маршрутизаторов Tenda AC, позволяющая нарушителю выполнить произвольный код