Tenda AC10 Stack Overflow Vulnerability in get_parentControl_list_Info Function

A stack overflow vulnerability has been identified in the Tenda AC10 router running firmware v4.0 v16.03.10.20. The issue arises in the function get_parentControl_list_Info, where a heap-based buffer overflow can be exploited via the deviceId parameter.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.