The Tenda W3 Wireless Router version 1.0.0.3(2204) has multiple stack overflow vulnerabilities in the formwrlSSIDset function, specifically triggered through the mit_ssid and mis_ssid_index parameters. Exploitation requires no privileges or user interaction and can be performed remotely over the network via a crafted HTTP request. Successful exploitation results in a denial of service by crashing the device or disrupting its normal operation. The vulnerabilities are categorized under CWE-121 (Stack-based Buffer Overflow). No known exploits in the wild have been reported, and no vendor advisory or patch information is currently provided.

An attacker can cause a denial of service on the affected Tenda W3 Wireless Router by sending specially crafted HTTP requests that trigger stack overflows. This results in service disruption, potentially making the router unavailable to legitimate users. There is no indication of confidentiality or integrity impact from the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network administrators should consider limiting exposure of the affected device to untrusted networks and monitor for unusual HTTP requests targeting the router. No official remediation or temporary fixes are currently documented.