The vulnerability of the fromIpsecitem() function in the httpd component of the /goform/IPSECsave module of the Tenda CH22 router software allows a attacker to execute arbitrary code.

The vulnerability of the fromIpsecitem function in the httpd component of the /goform/IPSECsave module of the Tenda CH22 router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by...