A stack-based buffer overflow vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface in Tenda AC18 firmware version 15.03.05.05_multi. Remote attackers can exploit this by sending oversized data to this parameter, potentially causing device crashes or remote code execution.