Tenda M3 formSetCfm function stack overflow vulnerability

Tenda M3 is an access controller from Tenda, China. Tenda M3 version V1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the formSetCfm function not checking the length of input data. An attacker could exploit this vulnerability to cause a denial of service attack.