A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

A buffer overflow vulnerability has been identified in the Tenda HG10 router (firmware version 300001138). The flaw exists in the formLogin function within the /boaform/formLogin file, served by the Boa Web Server component. An attacker can exploit this vulnerability by manipulating the Username argument to trigger a buffer overflow condition. The attack can be launched remotely without requiring physical access to the device. A public exploit has already been disclosed, increasing the risk of active exploitation. This vulnerability poses a significant threat to users of the affected Tenda HG10 devices. The issue has been catalogued in VulDB and the NVD. No patch or mitigation details are mentioned in the article. Users of the affected device should monitor for vendor advisories from Tenda.