Executive brief
A security vulnerability has been identified in the Tenda G0 router, a device used to manage network traffic and security for small businesses or home offices. An attacker can exploit this flaw by sending a specially crafted web request to the device, causing it to crash or become unstable. This results in a denial of service, potentially disrupting internet connectivity and business operations until the device is restarted.
Technical details
A stack-based buffer overflow exists in the Tenda G0 router firmware version v15.11.0.5. The vulnerability is located within the formIPMacBindAdd function, where the user-supplied HTTP parameter 'IPMacBindRule' is retrieved via websGetVar and subsequently passed to the ipMacBindListStore function. Inside ipMacBindListStore, the input is processed using an unsafe strcpy() call into a fixed-size stack buffer (acStack_11a20) without length validation. A remote attacker can exploit this by sending a crafted HTTP request with an oversized IPMacBindRule string, leading to a process crash or device instability (Denial of Service). The vulnerable path is reportedly reachable without complex preconditions.
Affected products
- Tenda G0 v15.11.0.5
Timeline
- 2026-03-17: other: CVE request submitted to MITRE
- 2026-06-06: disclosed: Public disclosure
- 2026-06-09: advisory: NVD published date