Description (CNA)
A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tenda / AC10 | affected 16.03.10.13 |
CWE
CWE-120, CWE-119
References
- https://vuldb.com/?id.330914
- https://vuldb.com/?ctiid.330914
- https://vuldb.com/?submit.678889
- https://www.yuque.com/ba1ma0-an29k/nnxoap/rg8eug0zk8ep3zne?singleDoc
- https://pan.baidu.com/s/1Jl1zy5niigg1XYm8ZCh_Lg
- https://www.tenda.com.cn/
ADP enrichment
No English description supplied.
No references supplied.