Tenda AC6 Buffer Overflow Vulnerability in setparentcontrolinfo Function

A critical buffer overflow vulnerability has been identified in the Tenda AC6 router, specifically in version 15.03.06.50. The issue arises in the httpd component, within the setparentcontrolinfo function, where the product improperly handles input buffers, leading to potential memory corruption. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or a denial-of-service condition.