The vulnerability of the addAuthUser function (goform/formAddWebAuthUse) in the Tenda W20E router software allows a hacker to execute arbitrary commands.

The vulnerability of the addAuthUser function goform/formAddWebAuthUse in the Tenda W20E router microprogramming system lies in the fact that the operation’s output escapes the buffer and is stored in the userInfo parameter’s memory. Exploiting this vulnerability allows a remote attacker to execu...