Tenda AC18 Stack Overflow Vulnerability in funcSetCfm Function

A stack overflow vulnerability has been identified in the Tenda AC18 router, specifically in version V15.03.05.19. The issue arises in the formSetCfm function, where the funcpara1 parameter is improperly handled, leading to the overflow.

Impact

Exploitation of this vulnerability causes a stack overflow, which can potentially be leveraged to execute arbitrary code or cause a denial-of-service condition by crashing the device.