The vulnerability of the fromSysToolTime() function (/goform/setSysTimeInfo) in the Tenda O3 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSysToolTime function /goform/setSysTimeInfo in the Tenda O3 wireless access point software lies in the fact that the operation may escape out of the buffer in memory when processing the Time parameter. Exploiting this vulnerability could allow a malicious actor to...