Tenda AX3 Buffer Overflow Vulnerability in Time Synchronization Function

A buffer overflow vulnerability has been identified in the Tenda AX3 router, specifically in version V16.03.12.10_CN. The issue arises in the fromSetSysTime function, where the ntpServer parameter is improperly handled, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing a denial-of-service condition.