Tenda RX3 Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in the Tenda RX3 router, specifically in the US_RX3V1.0br_V16.03.13.11_multi_TDE01 version. The issue arises in the '/goform/setPptpUserList' endpoint, where the 'list' parameter can be manipulated to overflow the buffer. This vulnerability allows attackers to craft packets that cause a denial-of-service condition on the device.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to become unresponsive or unavailable.