The vulnerability lies in the /goform/multimodalAdd component of the HTTP POST Request Handler in the microprogramming software for Tenda A15 routers. This allows a hacker to execute any arbitrary code.

The vulnerability in the /goform/multimodalAdd component of the HTTP POST Request Handler of the microprogramming-based router software Tenda A15 involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operating remotely to execu...