CyberRota Analysis
AI-GeneratedThe Tenda W6-S 1.0.0.4(510) is vulnerable to a stack-based buffer overflow in the /goform/wifiSSIDset endpoint, where user-controlled parameters can overflow a 64-byte stack buffer due to improper handling in the sprintf function. This vulnerability can lead to remote code execution, allowing attackers to gain control over the affected device. Organizations using this model should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.