The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.
| Software | From | Fixed in |
|---|---|---|
| tenda / ac23_firmware | 16.03.07.45_cn | 16.03.07.45_cn.x |