CVE-2025-0349

Опубликовано: 09 янв. 2025

Источник: nvd

CVSS3: 8.8

CVSS3: 9.8

CVSS2: 9

EPSS Низкий

Описание

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Ссылки

https://github.com/wy876/cve/issues/5
Exploit
Issue Tracking
Third Party Advisory
https://vuldb.com/?ctiid.290862
Permissions Required
VDB Entry
https://vuldb.com/?id.290862
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.477048
Third Party Advisory
VDB Entry
https://www.tenda.com.cn/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tenda:ac6_firmware:15.03.05.16:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac6:-:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00771

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119

CWE-787

Связанные уязвимости

GHSA-5r5h-j8r7-pr7g

CVSS3: 8.8

github

около 1 года назад

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

EPSS

Процентиль: 73%

0.00771

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119

CWE-787