Executive brief
A vulnerability exists in the Tenda JD12L Pro router, a device used to provide wireless internet connectivity. An attacker can exploit this flaw to crash the router's management interface or potentially take full control of the device. This could allow an unauthorized user to monitor network traffic, steal data, or use the compromised router to launch further attacks on other devices within the network.
Technical details
A stack-based buffer overflow vulnerability exists in the Tenda JD12L Pro router (firmware version 16.03.53.23) within the 'fromNatStaticSetting' function of the '/goform/NatStaticSetting' endpoint. The root cause is the unsafe use of 'sprintf' to process the user-controlled 'page' parameter into a fixed-size 256-byte buffer without length validation. A remote attacker can exploit this by sending a specially crafted POST request with an oversized 'page' value. Successful exploitation can lead to memory corruption, overwriting the return address on the stack to achieve arbitrary code execution, or causing a Denial of Service (DoS) by crashing the web server process. A public exploit (PoC) is available.
Affected products
- Tenda JD12L Pro 16.03.53.23
Timeline
- 2026-05-27: disclosed: Initial disclosure on GitHub by researcher Li Kunyang
- 2026-06-29: advisory: NVD publication date