Executive brief
Tenda HG10 is a wireless router and modem device used by homes and small businesses for internet connectivity. A buffer overflow vulnerability in the web management interface allows a remote attacker to crash the device or potentially execute arbitrary code by sending a specially crafted request with an overlong wireless network name (SSID) parameter. This could disrupt internet access for all connected users and compromise the security of the entire network.
Technical details
A buffer overflow vulnerability exists in the Boa web server component of Tenda HG10 firmware version HG7_HG9_HG10re_300001138, specifically in the formWlanSetup function handling of the ssid parameter. The vulnerable code uses unsafe string operations (strcpy) to copy user-supplied input into a fixed-size buffer without length validation. An unauthenticated remote attacker can submit an HTTP POST request to /boaform/formWlanSetup with an overlong ssid value, causing a stack or heap buffer overflow. Successful exploitation results in denial-of-service (device crash) and potentially arbitrary code execution depending on memory layout and runtime protections. No patch status is currently indicated.
Affected products
- Tenda HG10 HG7_HG9_HG10re_300001138
Timeline
- 2026-09-03: disclosed