Tenda i6 formwrlSSIDset function buffer overflow vulnerability

Tenda i6 is a wireless access point from Tenda (China). A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the index parameter of the formwrlSSIDset function of /goform/wifiSSIDset that fails to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on the system or lead to denial of service attacks.