Headline
CVE-2023-24165: Tenda/7.md at main · DrizzlingSun/Tenda
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.
****CVE-2023-24165****
Tenda AC18 Unauthorized stack overflow vulnerability
****1. Affected version:****
Tenda ac18_kf_V15.03.05.19(6318_)_cn
****2. Firmware download address****
AC18升级软件_腾达(Tenda)官方网站
****3. Vulnerability details****
The function “initIpAddrInfo” contains a stack-based buffer overflow vulnerability. In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check, which may lead to overflow of the stack-based buffer. As a result, by requesting the page, an attacker can easily execute a denial of service attack or remote code execution with carefully crafted overflow data.
****4. Recurring vulnerabilities and POC****
Due to legal and policy reasons, we are unable to provide the exploit for this vulnerability at this time.
5. Author
Drizzling_Sun @KRlab