A stack overflow occurs in the wl_radio parameter within the formWifiRadioSet function of Shenzhen Tenda Technology's Tenda W3 Wireless Router firmware. This is a stack‑based buffer overflow vulnerability (CWE‑121). By sending a specially crafted HTTP request, an attacker can trigger the overflow and cause the device to crash or cease responding, leading to a denial of service of the router’s network functions.

Shenzhen Tenda Technology Co., Ltd. Tenda W3 Wireless Router with firmware version 1.0.0.3(2204).

The vulnerability can be triggered remotely via the router’s web interface over HTTP. The description does not specify whether authentication is required; it is inferred that no authentication may be necessary. Based on the description, it is inferred that there is no proper input validation for the wl_radio field, allowing an attacker to send input of arbitrary length which may result in stack corruption and termination of the networking stack. The CVSS score is 7.5, the EPSS score is less than 1%, and it is not listed in the CISA KEV catalog. The ease of exploitation and the potential for widespread network disruption make the risk significant for networks that expose the router’s management interface to untrusted traffic.