Tenda A15 deviceList Parameter Buffer Overflow Vulnerability

Tenda A15 is a WiFi extender from Tenda (China). A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the deviceList parameter of the /goform/setBlackRule file failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on the system or lead to a denial of service attack.