Tenda AC23 API Interface Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Tenda AC23 router, specifically in version 16.03.07.52. The issue arises within the API interface, particularly in the file '/goform/VerAPIMant', where the 'getuid' argument can be manipulated to disrupt service. This vulnerability can be exploited remotely, causing a significant impact on the router's availability.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the router to become unresponsive or unavailable.

Reproduction

The vulnerability can be reproduced by sending a request to the '/goform/VerAPIMant' endpoint with a manipulated 'getuid' argument. This can be done remotely, causing the router to enter a denial-of-service state.