CVE-2026-2905 Details
Description
A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.
A stack-based buffer overflow vulnerability has been identified in the Tenda HG9 router, specifically in the wireless configuration endpoint '/boaform/formWlanSetup' on firmware version 300001138. The vulnerability arises because the 'formWlanSetup' function does not properly validate the length of the 'ssid' parameter before copying it into fixed-size stack buffers using the unsafe 'strcpy' function. This lack of input validation allows an attacker to send a crafted request with an 'ssid' longer than 33 bytes, overwriting the stack frame and potentially leading to arbitrary code execution or a denial-of-service condition by crashing the device's web service.
Users are advised to update to a version of the firmware that addresses this vulnerability. If no such update is available, consider replacing the router with a more secure model.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/QIU-DIE/cve-nneeww/issues/7 | [email protected] | ExploitIssue TrackingMitigationThird Party Advisory |
| https://vuldb.com/?ctiid.347214 | [email protected] | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.347214 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.755167 | [email protected] | Third Party AdvisoryVDB Entry |
| https://www.tenda.com.cn/ | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tenda hg9 firmware | 300001138 |
CPE
Remediation
| |
| tenda hg9 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 23, 2026 | Initial Analysis | [email protected] |
| Feb 22, 2026 | New CVE Received | [email protected] |