Impact
A stack overflow exists in the domain parameter of the fromNetToolGet function of the Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router firmware version 1.0.0.5(4180). An attacker can send a specially crafted HTTP request that overflows the buffer, causing the router to crash and become unreachable. The vulnerability results in a denial of service for legitimate users by rendering the router inoperable.
Affected Systems
The affected product is the Tenda O3 Wireless Router running firmware v1.0.0.5(4180). No other vendors or products are listed. Users of this specific router model are at risk.
Risk and Exploitability
No CVSS score is provided, and the EPSS score is not available, so the quantitative risk is unknown. The vulnerability is not listed in CISA KEV, indicating no known widespread exploitation. The likely attack vector is remote via HTTP, leveraging the limited input validation in the domain parameter of fromNetToolGet. If an attacker can reach the router over the network, they can cause a DoS by triggering the overflow.
OpenCVE Enrichment