CNNVD-202509-2265 Information
CNNVD ID
CNNVD-202509-2265
Related CVE
- CNNVD Published: 2025-09-15
Description (Chinese)
Tenda AC1206是中国腾达（Tenda）公司的一款无线千兆路由器。 Tenda AC1206 15.03.06.23版本存在安全漏洞，该漏洞源于HTTP Request Handler组件中文件/goform/AdvSetMacMtuWa的函数check_param_changed对参数wanMTU的错误操作，可能导致基于栈的缓冲区溢出。
Description (English)
Tenda AC1206 is a wireless gigabyte router of Tenda, China. 15.03.06.23 version of Tenda AC1206.06.23 contains a security loophole that stems from the error of the function check param changed against the parameter wan MTU in the document/goform/AdvSetMacMtuWa in the HTTTP Request Handler component, which may result in the spilling out of the fence-based buffer zone.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
腾达
Published
2025-09-15
Last Modified
2026-02-24
References
https://github.com/M4st3rYi/IoTVulPocs/blob/main/Tenda/AC1206/fromAdvSetMacMtuWan.md https://vuldb.com/?ctiid.323866 https://vuldb.com/?id.323866 https://vuldb.com/?submit.647527 https://www.tenda.com.cn/
Share on: