Buffer Overflow Vulnerability in Tenda PA6 Wi-Fi Powerline Extender
CVE-2019-19505

8.8HIGH

Key Information:

Vendor
Tenda
Status
Pa6 Firmware
Vendor
CVE Published:
25 June 2020

Summary

The Tenda PA6 Wi-Fi Powerline Extender version 1.0.1.21 is susceptible to a stack-based buffer overflow due to inadequate bounds checking in the web interface's 'Wireless' section. This vulnerability could enable remote attackers to send specially crafted hostnames, potentially leading to arbitrary code execution or crash of the device, posing serious security risks in IoT deployments.

References

https://securityintelligence.com/posts/vulnerable-powerli...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.