A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a mani…

A stack-based buffer overflow vulnerability was discovered in Tenda i3 router firmware version 1.0.0.6(2204). The vulnerability affects the formexeCommand function in the /goform/exeCommand file, where manipulation of the cmdinput argument can trigger the buffer overflow. The vulnerability can be exploited remotely, making it particularly dangerous for internet-connected devices. Public exploits have been disclosed and are available for use by attackers. This affects network infrastructure devices that are commonly deployed in homes and small offices.