CVE-2020-13392

CVE-2020-13392 affects several Tenda devices (e.g., AC6, AC9, AC15, AC18) with the HTTP server (/goform/setcfm funcpara1) vulnerable to a buffer overflow. In the affected httpd, a value taken from a POST parameter is directly used in a vulnerable sprintf to a stack-allocated local variable, overw...