The vulnerability of the formGetDdosDefenceList() function in the Tenda AC9 router’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formGetDdosDefenceList function in the Tenda AC9 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the security.ddos.map parameter. Exploiting this vulnerability allows a remote attacker to execute...