漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Tenda F456 exeCommand fromexeCommand stack-based overflow
Vulnerability Description
A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
Tenda F456 安全漏洞
Vulnerability Description
Tenda F456是中国腾达(Tenda)公司的一款无线路由器。 Tenda F456 1.0.0.5版本存在安全漏洞,该漏洞源于文件/goform/exeCommand的函数fromexeCommand对参数cmdinput的操作存在栈缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A