Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls without proper length validation. A remote attacker can exploit this flaw through a crafted POST request, which may cause a Denial of Service (DoS). In certain scenarios, this issue could potentially be leveraged to achieve remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenda FH1206 安全漏洞
Vulnerability Description
Tenda FH1206是中国腾达（Tenda）公司的一款无线路由器。 Tenda FH1206 v02.03.01.35 版本存在安全漏洞，该漏洞源于 fromPptpUserAdd 函数的 modino 参数中包含一个缓冲区溢出漏洞。
CVSS Information
N/A
Vulnerability Type
N/A