CVE-2023-24164: Tenda/4.md at main · DrizzlingSun/Tenda

****CVE-2023-24164****

Tenda AC18 Unauthorized stack overflow vulnerability

****1. Affected version:****

Tenda ac18_kf_V15.03.05.19(6318_)_cn

****2. Firmware download address****

https://www.tenda.com.cn/download/detail-2683.html

****3. Vulnerability details****

The function “FUN_000c2318” contains a stack-based buffer overflow vulnerability. In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check, which may lead to overflow of the stack-based buffer. As a result, by requesting the page, an attacker can easily execute a denial of service attack or remote code execution with carefully crafted overflow data.

****4. Recurring vulnerabilities and POC****

Due to legal and policy reasons, we are unable to provide the exploit for this vulnerability at this time.

5. Author

Drizzling_Sun @KRlab