The vulnerability of the /goform/saveAutoQos function in the microprogramming router Tenda AC15 allows a attacker to execute arbitrary code.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC15 routers lies in the fact that the operation’s output goes beyond the buffer in memory when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...