Tenda RX3 Buffer Overflow Vulnerability in PPTP Server Configuration

A buffer overflow vulnerability has been identified in the Tenda RX3 router, specifically in the US_RX3V1.0br_V16.03.13.11_multi_TDE01 version. The issue arises in the '/goform/SetPptpServerCfg' endpoint, where the 'startIp' and 'endIp' parameters can be manipulated. This vulnerability allows attackers to craft packets that cause a denial-of-service condition on the device.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to become unresponsive or unavailable.