Tenda A15 devName Parameter Buffer Overflow Vulnerability

Tenda A15 is a WiFi extender from Tenda (China). A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the devName parameter of the /goform/SetOnlineDevName file failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.