Volerion logoVolerion
Volerion logoVolerion

Tenda AC8 Buffer Overflow Vulnerability in DatabaseIniSet Function

Vulnerability

A buffer overflow vulnerability has been identified in the Tenda AC8 router, specifically in version 16.03.34.06. The issue arises in an unknown function of the file '/goform/DatabaseIniSet', where the argument 'Time' can be manipulated, leading to the overflow. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a crash of the device.

Added: Nov 3, 2025, 7:19 AM
Updated: Nov 3, 2025, 7:19 AM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.9
threat
6.4
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.