CVE-2020-13390 Memory corruption in n/a

Critical 9.8 Published 22 May 2020 Updated 4 Aug 2024

A buffer overflow in the Tenda router web server allows remote attackers to execute arbitrary code via crafted POST requests.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-13390?

CVE-2020-13390 is a critical memory corruption vulnerability in n/a, published on 22 May 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/addressNat entrys and mitInterface parameters for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.

Weakness: CWE-120

Which versions are affected by CVE-2020-13390?

It affects 4 products.

Products include Tendacn Ac15 Firmware, Tendacn Ac18 Firmware, Tendacn Ac6 Firmware, Tendacn Ac9 Firmware.

How do I fix CVE-2020-13390?

No fix has been published for CVE-2020-13390 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-13390 being exploited?

There is no known exploitation of CVE-2020-13390 in the wild and no public exploit code.

Sources

Also known as GHSA-2j5p-cf62-8pj2.