Buffer Overflow Vulnerability in Tenda Routers

CVE-2018-18708

Summary

A buffer overflow vulnerability has been identified in the web server component (httpd) of specified Tenda router models. This flaw occurs when the 'page' parameter in the 'fromAddressNat' function processes input in a way that allows an attacker to exploit the stack overflow condition. Through carefully crafted post requests, an attacker could potentially overwrite the return address of a function, leading to arbitrary code execution and compromising the router's security.

References