The vulnerability of the fromqossetting() function (/goform/qossetting) in the Tenda F453 router’s microprogramming software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromqossetting function /goform/qossetting of the Tenda F453 router’s microprogramming system lies in the fact that the operation results are stored outside the buffer in the parameter qos’s memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...