Tenda AC8 vulnerabilities

A critical vulnerability was found in Tenda AC8 version 16.03.34.06_cn_TDC01 in the formSetDeviceName function, leading to stack-based buffer overflow. The vulnerability can be exploited remotely.

The Tenda AC8 v4 device has a stack overflow vulnerability due to improper handling of the parameter list at the endpoint /goform/SetStaticRouteCfg.

A buffer overflow vulnerability in the UPnP service of Tenda AC8 hardware version v03.03.10.01 allows an attacker to cause a Denial of Service (DoS) by sending a crafted packet.