A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

A buffer overflow vulnerability has been identified in the Tenda HG10 router (firmware version 300001138). The vulnerability exists in the formWlanSetup function within the /boaform/formWlanSetup file, part of the Boa Web Server component. An attacker can manipulate the 'ssid' argument to trigger a buffer overflow condition. The vulnerability is remotely exploitable, requiring no physical access to the device. A public exploit is already available, increasing the risk of active exploitation. IoT/router devices running this firmware are at risk of being compromised. The vulnerability has been catalogued in VulDB and NVD databases. Tenda HG10 is a consumer-grade router/gateway device, making this a significant risk for home and small office networks.