CNNVD-202602-1174 Information
Feb 08, 2026
cve
CNNVD ID
CNNVD-202602-1174
Related CVE
- CNNVD Published: 2026-02-08
Description (Chinese)
Tenda AC9是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC9 15.03.06.42_multi版本存在安全漏洞，该漏洞源于对函数formGetRebootTimer的参数sys.schedulereboot.start_time/sys.schedulereboot.end_time操作不当，可能导致栈缓冲区溢出。
Description (English)
Tenda AC9 is a wireless router of Tenda China. There is a security loophole in Tenda AC9 15.03.06.42 multi version, which stems from the inappropriate operation of the parameter sys.schedulereboot.start time/sys.schedulereboot.end time for function FormGetRebootTimer, which may result in spilling out of the hedge zone.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
腾达
Published
2026-02-08
Last Modified
2026-02-24
References
https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda4.md https://vuldb.com/?ctiid.344895 https://vuldb.com/?id.344895 https://vuldb.com/?submit.749801 https://www.tenda.com.cn/
Share on: