A stack-based buffer overflow exists in the formwrlSSIDset function of the Tenda W3 Wireless Router firmware v1.0.0.3(2204). The vulnerability is triggered by crafted values supplied through the mit_ssid and mis_ssid_index HTTP parameters, which overrun the stack, corrupt memory, and cause the router to crash. The immediate consequence is a denial of service that prevents legitimate users from accessing network resources, with no evidence of code execution or data disclosure.

Shenzhen Tenda Technology Co., Ltd. Tenda W3 Wireless Router running firmware version 1.0.0.3(2204). No other affected versions are listed in the disclosure.

The CVSS score is 7.5, reflecting a high impact severity. The EPSS score is less than 1 %, indicating a low probability of exploitation in the current environment. The vulnerability is not listed in the CISA KEV catalog. It is inferred that the attack vector is a remote HTTP request to the router's administration interface, either from the Internet or from a compromised local network. Because the flaw leads solely to a service interruption, the impact is significant for availability but does not compromise confidentiality or integrity.