The vulnerability of the SetValue() function in Tenda AC7 microprogrammed software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetValue function in Tenda AC7 microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the newVersion parameter at the /goform/setNotUpgrade endpoint. Exploiting this vulnerability allows a malicious actor to...