A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST R…

A stack-based buffer overflow vulnerability was identified in Tenda AC5 router firmware version 15.03.06.47. The vulnerability affects the decodePwd function in the /goform/WizardHandle file within the POST Request Handler component. Attackers can exploit this vulnerability remotely by manipulating the WANT/WANS argument parameters. The exploit has been publicly disclosed and is available for use, making this a high-risk vulnerability. The vulnerability allows remote code execution through buffer overflow attacks targeting the router's web interface.