CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the Tenda HG7, HG9, and HG10 routers, specifically within the Boa Web Server's boaGetVar function, which is susceptible to a stack-based buffer overflow due to improper handling of the Ethtype argument. This flaw allows for remote exploitation, potentially enabling attackers to execute arbitrary code on the affected devices. Organizations using these routers should prioritize immediate remediation to mitigate the risk of unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.