A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

A buffer overflow vulnerability has been identified in the Tenda HG10 300001138 router, specifically in the formLogin function located at /boaform/formLogin within the Boa Web Server component. The vulnerability is triggered by manipulating the Username argument, which can lead to a buffer overflow condition. The attack can be launched remotely without requiring physical access to the device. A public exploit has already been disclosed and is available for use, increasing the risk of active exploitation. This vulnerability poses a significant threat to IoT and network infrastructure devices running the affected Tenda firmware. Affected users should apply patches or mitigations as soon as they become available. The issue has been catalogued in both NVD and VulDB databases.