- Affected Firmware: TOTOLINK_C8160R-1C_N600R_IP04291_8196D_SPI_4M32M_V4.3.0cu.7647_B20210106_ALL
- CVE-ID: CVE-2025-22900
- Root Cause: By analyzing the cstecgi.cgi file in the cgi-bin directory, I found that the function at address 0x420CD0 contains a stack overflow vulnerability.
- Impact: Remote unauthenticated attackers can execute arbitrary commands as root.
xyqer1
xyqer1
/ TOTOLINK-N600R-setWanConfig-StackOverflow.md
Last active
April 9, 2025 09:39
xyqer1
/ TOTLINK-N600R-setWiFiWpsConfig-StackOverflow.md
Last active
April 9, 2025 09:45
- Affected Firmware: TOTOLINK_C8160R-1C_N600R_IP04291_8196D_SPI_4M32M_V4.3.0cu.7647_B20210106_ALL
- CVE-ID: CVE-2025-22903
- Root Cause: By analyzing the cstecgi.cgi file in the cgi-bin directory, I found that the function at address 0x41CAF4 contains a stack overflow vulnerability.
- Impact: Remote unauthenticated attackers can execute arbitrary commands as root.
xyqer1
/ RE11S_1.11-formiNICbasicREP-StackOverflow.md
Created
April 8, 2025 08:59
During my internship at Qi An Xin Tiangong Lab, I discovered a stack overflow vulnerability in the RE11S_1.11 router.
By analyzing the webs file in the bin directory, I found that the function formiNICbasicREP contains a stack overflow vulnerability.
The stack overflow can be triggered by the rootAPmac key value, which leads to a sprintf stack overflow.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-mac2-StackOverflow.md
Created
April 8, 2025 09:05
During my internship at Qi An Xin Tiangong Lab, I discovered a stack overflow vulnerability in the Tenda-AC10 router.
By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
The stack overflow can be triggered by the mac2 key value, which leads to a strcpy stack overflow.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-serverName2-StackOverflow.md
Created
April 8, 2025 09:07
During my internship at Qi An Xin Tiangong Lab, I discovered a stack overflow vulnerability in the Tenda-AC10 router.
By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
The stack overflow can be triggered by the serverName2 key value, which leads to a strcpy stack overflow.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-serviceName2-StackOverflow.md
Last active
April 17, 2025 06:54
- Affected Firmware: US_AC10V4.0si_V16.03.10.20_cn_TDC01
- CVE-ID: CVE-2025-25454
- Root Cause: By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
- Impact: Remote unauthenticated attackers can execute arbitrary commands as root.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-wanMTU2-StackOverflow.md
Last active
April 17, 2025 06:48
- Affected Firmware: US_AC10V4.0si_V16.03.10.20_cn_TDC01
- CVE-ID: CVE-2025-25455
- Root Cause: By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
- Impact: Remote unauthenticated attackers can hijack the program's control flow.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-wanSpeed2-StackOverflow.md
Created
April 8, 2025 09:11
During my internship at Qi An Xin Tiangong Lab, I discovered a stack overflow vulnerability in the Tenda-AC10 router.
By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
The stack overflow can be triggered by the wanSpeed2 key value, which leads to a strcpy stack overflow.
xyqer1
/ Tenda-AC10-AdvSetMacMtuWan-cloneType2-StackOverflow.md
Last active
April 17, 2025 07:58
- Affected Firmware: US_AC10V4.0si_V16.03.10.20_cn_TDC01
- CVE-ID: CVE-2025-25457
- Root Cause: By analyzing the webs file in the bin directory, I found that the function 0x45C380 contains a stack overflow vulnerability.
- Impact: Remote unauthenticated attackers can execute arbitrary commands as root.
xyqer1
/ Dlink-dir-823x-diag_nslookup-target_addr-CommandInjection.md
Last active
April 17, 2025 08:15
- Affected Firmware: 240802
- CVE-ID: CVE-2025-29041
- Root Cause: By analyzing the webs file in the bin directory, I found that the function 0x41710c contains a command injection vulnerability.
- Impact: Remote unauthenticated attackers can execute arbitrary commands as root.
OlderNewer