CVE-2026-11498

Vulnerability

A stack-based buffer overflow vulnerability exists in the asp_voip_OtherSet function within the /boaform/voip_other_set component of the Web Management Interface on Tenda HG7, HG9, and HG10 routers, specifically affecting firmware version 300001138_en_xpon. This vulnerability is triggered by manipulating the funckey_transfer argument [1].

Exploitation

An attacker with access to the web management interface can remotely exploit this vulnerability by sending a crafted request that manipulates the funckey_transfer parameter. This manipulation leads to a stack-based buffer overflow within the asp_voip_OtherSet function [1].

Impact

Successful exploitation of this vulnerability can result in a denial of service (DoS) on the affected device. Depending on the runtime environment and existing security protections, it may also be possible for an attacker to achieve arbitrary code execution, potentially leading to a compromise of the device [1].

Mitigation

No specific patched version or release date has been disclosed in the available references. Users are advised to check the vendor's official website for any potential firmware updates or security advisories. The vendor's website is available at [2].