Tenda AC7 Routers at Risk of Root Compromise, PoC Released

The vulnerability is a stack-based buffer overflow within the formSetFirewallCfg function. A remote attacker can exploit this flaw by sending a specially crafted payload to the router’s web interface.