Executive brief
A security vulnerability exists in the Tenda AC8V4 home router, a device used to provide wireless internet access. An attacker can send a specially crafted request to the router's management interface to cause a system crash or potentially gain unauthorized control over the device. This could lead to a loss of internet connectivity or allow an attacker to disrupt network operations.
Technical details
A heap-based buffer overflow (CWE-122) exists in the Tenda AC8V4 router firmware version V16.03.34.06. The vulnerability is located within the 'GetParentControlInfo' function, which processes POST requests to the '/goform/GetParentControlInfo' endpoint. The application fails to validate the length of the 'mac' parameter before copying it into a heap-allocated buffer using the 'strcpy' function. A remote, unauthenticated attacker can exploit this by sending an oversized 'mac' string, leading to memory corruption, a denial-of-service (DoS) condition, or potentially arbitrary code execution. A proof-of-concept exploit demonstrating the crash is publicly available.
Affected products
- Tenda AC8V4 firmware V16.03.34.06
Timeline
- 2025-07-24: advisory: NVD publication date