There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.
References
| Link | Resource |
|---|---|
| https://github.com/Lyc-heng/routers/blob/main/routers/stack4.md | Exploit Third Party Advisory |
| https://www.cnvd.org.cn/flaw/show/CNVD-2021-24948 | Third Party Advisory |
| https://github.com/Lyc-heng/routers/blob/main/routers/stack4.md | Exploit Third Party Advisory |
| https://www.cnvd.org.cn/flaw/show/CNVD-2021-24948 | Third Party Advisory |
Configurations
History
21 Nov 2024, 06:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Lyc-heng/routers/blob/main/routers/stack4.md - Exploit, Third Party Advisory | |
| References | () https://www.cnvd.org.cn/flaw/show/CNVD-2021-24948 - Third Party Advisory |
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 |
02 Jun 2022, 17:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/Lyc-heng/routers/blob/main/routers/stack4.md - Exploit, Third Party Advisory | |
| References | (MISC) https://www.cnvd.org.cn/flaw/show/CNVD-2021-24948 - Third Party Advisory | |
| CWE | CWE-120 | |
| CVSS |
v2 : v3 : |
v2 : 6.1
v3 : 6.5 |
| CPE | cpe:2.3:h:tenda:ac9:1.0:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac9_firmware:15.03.06.42_multi:*:*:*:*:*:*:* cpe:2.3:h:tenda:ac9:3.0:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac9_firmware:15.03.05.19\(6318\):*:*:*:*:*:*:* |
24 May 2022, 12:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-24 12:15
Updated : 2024-11-21 06:27
NVD link : CVE-2021-42659
Mitre link : CVE-2021-42659
CVE.ORG link : CVE-2021-42659
JSON object : View
Products Affected
tenda
- ac9_firmware
- ac9
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer