Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')