sub_41E858_GO.md

Overview

• Firmware download website: https://www.tenda.com.cn/download/detail-2227.html

Affected version

4G300 V1.01.42

Vulnerability details

The Tenda 4G300 V1.01.42 firmware has a stack overflow vulnerability in the sub_41E858 function. The v3 variable receives the GO parameter from a POST request. However, since the user can control the input of GO , the statement can cause a buffer overflow. The user-provided GO can exceed the capacity of the v10 array, triggering this security vulnerability.

POC