A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of…

A buffer overflow vulnerability has been discovered in Tenda F456 router version 1.0.0.5. The flaw exists in an unknown function within the /goform/setcfm file of the httpd component. Attackers can exploit this vulnerability by manipulating the funcname/funcpara1 arguments to cause a buffer overflow. The vulnerability can be exploited remotely, and exploit code has already been published and made available to attackers. This poses a significant security risk to affected Tenda F456 devices as remote attackers can potentially compromise the devices without authentication.