Vulnerability feed

Executive summary

A buffer overflow flaw has been reported in the Tenda BE3L Pro router, firmware version V16.03.60.62. The advisory says the flaw can be triggered without logging in and can lead to crashes, memory corruption, or arbitrary code execution. The advisory says the issue requires immediate remediation, but it does not state a vendor-released fix.

Technical summary

The flaw is a stack-based or memory buffer overflow caused by an unchecked strcpy call in the formWifiBasicSet() function, reached through the /goform/WifiBasicSet endpoint. The security_5g POST parameter is copied into a fixed 256-byte buffer without a size check, and the advisory's proof of concept sends 2048 bytes. The advisory states no authentication is required. Affected version is listed as V16.03.60.62, and a fixed version is not stated. No vendor patch, workaround from the vendor, CVSS score, or exploitation in the wild is stated. The advisory's suggested repairs are developer-side code changes such as strncpy and bounds checking, and no detection guidance is given beyond these.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from github.com/Tmzop/Tenda-CVE

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

Low

User interaction

None

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affects

TendaTenda BE3L Pro