CyberRota Analysis
AI-GeneratedA critical buffer overflow vulnerability exists in the formLogin function of the Boa Web Server used in Tenda HG10 devices, which can be exploited remotely by manipulating the Username argument. This flaw poses a significant risk as it could allow attackers to execute arbitrary code on the affected devices. Organizations using Tenda HG10 routers should prioritize immediate patching or mitigation efforts to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.