Executive brief
A vulnerability exists in the Tenda TX9 Pro router, a device used to provide wireless internet connectivity. An attacker can send a specially crafted network request to the router's management interface to cause the device to crash or lock up. This results in a denial-of-service, requiring a manual restart to restore internet access and router functionality.
Technical details
A stack overflow vulnerability exists in the 'httpd' binary of Tenda TX9 Pro firmware V22.03.02.20. The flaw is located within the 'sub_425964' function, which processes the 'mac' parameter from POST requests sent to '/goform/SetOnlineDevName'. This parameter is passed to the 'update_dev_name' function in 'libtd_server.so' without adequate length validation. An attacker can provide an oversized 'mac' string to trigger a stack overflow or hit a '__trap(0)' instruction, leading to a device hang or crash. This attack can be executed over the network via an unauthenticated POST request.
Affected products
- Tenda TX9 Pro V22.03.02.20
Timeline
- 2024-10-21: other: Initial researcher write-up published on Gitee
- 2026-07-20: disclosed: CVE published to NVD