CVE-2025-9523: Tenda AC1206, грешка в паметта

Описание

Оригинално описание

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

Засегнати продукти

• Tenda AC1206: 15.03.06.23

Вид слабост

• CWE-121 Препълване на буфера в стека
• CWE-119 Нарушаване на границите на буфер в паметта

История

Други уязвимости в Tenda AC1206

• 10.0CVE-2026-82694
• 10.0CVE-2026-82693
• 8.8CVE-2026-19789
• 8.8CVE-2026-19788
• 6.3CVE-2026-0581

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-9523
• https://nvd.nist.gov/vuln/detail/CVE-2025-9523
• https://vuldb.com/?id.321541
• https://vuldb.com/?ctiid.321541
• https://vuldb.com/?submit.634309
• https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC1206/AC1206V1.0RTL_V15.03.06.23.md
• https://www.tenda.com.cn/