Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02210)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda (China). A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.city.vlan parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploited by an attacker to execute arbitrary code on a system or lead to a denial of service attack.