CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability exists in the Tenda AC1206's web management interface, specifically in the set_device_name function of the /goform/SetOnlineDevName endpoint. This flaw allows remote attackers to manipulate the devName argument, potentially leading to arbitrary code execution. Organizations using affected Tenda devices should prioritize immediate patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.