A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing …

A stack-based buffer overflow vulnerability was discovered in Tenda i3 router firmware version 1.0.0.6(2204). The vulnerability affects the formSetAutoPing function in the /goform/setAutoPing file. Remote attackers can exploit this flaw by manipulating the ping1/ping2 arguments to trigger a buffer overflow. The vulnerability can be exploited remotely without authentication. Public exploits are available, making this a high-priority security risk for affected devices. Organizations using Tenda i3 routers should immediately assess their exposure and apply security updates when available.