Ac19
Monthly
A stack-based buffer overflow in the formSetFirewallCfg handler of the Tenda AC19 router's httpd web management service lets a remote attacker crash or potentially execute code on the device by sending an overlong firewallEn parameter to /goform/SetFirewallCfg. The issue is confirmed against firmware 16.03.10.07 and carries a 9.3 CVSS v4 score with a PR:N vector, meaning no authentication is asserted as a prerequisite, although Tenda goform endpoints commonly enforce a session on default builds and the independent assessment flags this as unverified. Publicly available exploit code exists (a GitHub PoC repository is linked from the CVE record), which raises the likelihood of opportunistic attempts against any AC19 whose management interface is reachable.
A stack-based buffer overflow in the formSetFirewallCfg handler of the Tenda AC19 router's httpd web management service lets a remote attacker crash or potentially execute code on the device by sending an overlong firewallEn parameter to /goform/SetFirewallCfg. The issue is confirmed against firmware 16.03.10.07 and carries a 9.3 CVSS v4 score with a PR:N vector, meaning no authentication is asserted as a prerequisite, although Tenda goform endpoints commonly enforce a session on default builds and the independent assessment flags this as unverified. Publicly available exploit code exists (a GitHub PoC repository is linked from the CVE record), which raises the likelihood of opportunistic attempts against any AC19 whose management interface is reachable.