The vulnerability of the SetValue() and GetValue() functions (/goform/setDhcpConfig) of the Tenda O3 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetValue and GetValue functions /goform/setDhcpConfig of the Tenda O3 wireless access point software lies in the fact that the operation goes beyond the buffer in memory when processing the macList parameter. Exploiting this vulnerability could allow a malicious actor to...