Beveiligingsadvies

CVE-2026-11498

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-08 06:45:21
Laatst bijgewerkt 2026-06-08 16:22:24
Toegewezen door VulDB
CVSS-score 9.0
Status PUBLISHED

Beschrijving

A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of the argument funckey_transfer results in stack-based buffer overflow. The attack is possible to be carried out remotely.