Tenda RX3 Buffer Overflow Vulnerability in Parent Control Management

A buffer overflow vulnerability has been identified in the Tenda RX3 router, specifically in the US_RX3V1.0br_V16.03.13.11_multi_TDE01 version. The issue arises in the '/goform/saveParentControlInfo' endpoint, where the 'deviceId' parameter is improperly handled. This vulnerability allows attackers to craft packets that trigger the buffer overflow, leading to a denial-of-service condition on the device.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, disrupting the normal functioning of the device.