A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the com…

A stack-based buffer overflow vulnerability was identified in Tenda AC6 router firmware version 15.03.05.16. The vulnerability exists in the formQuickIndex function of the /goform/QuickIndex file within the POST Request Handler component. The flaw can be exploited remotely by manipulating the PPPOEPassword argument, leading to a stack-based buffer overflow condition. The exploit code is publicly available, making this vulnerability particularly dangerous. Attackers can leverage this vulnerability to potentially execute arbitrary code remotely on affected Tenda AC6 devices. The vulnerability affects network infrastructure equipment, specifically wireless routers used in home and small business environments.