Tenda W6_S Buffer Overflow Vulnerability in setcfm Function Allowing Remote Denial-of-Service

A buffer overflow vulnerability has been identified in the Tenda W6_S router, specifically in version 1.0.0.4_510. The issue arises in the setcfm function, where remote attackers can cause a crash of the web server. This is achieved by sending a POST request with a crafted parameter, funcpara1, that triggers the buffer overflow.

Impact

Exploitation of this vulnerability leads to a crash of the web server, causing a denial-of-service condition.