CyberRota Analysis
AI-GeneratedThe Tenda CP3 V3.0 firmware is vulnerable to a stack-based buffer overflow in its RTSP service, allowing unauthenticated remote attackers to exploit the flaw by sending a malformed PLAY request. This can lead to a crash of the RTSP service, potentially disrupting service availability. Organizations using this firmware should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based buffer overflow in the RTSP service. The device fails to validate the length of the clock= value in the Range header field when processing a PLAY request. An unauthenticated remote attacker who has completed a standard RTSP session handshake can send a PLAY request with an excessively long clock= value to cause the RTSP service to crash.