Tenda AC15 Stack-Based Buffer Overflow Vulnerability in SetDevNetName Function

A critical stack-based buffer overflow vulnerability has been identified in the Tenda AC15 router, specifically in version 15.13.07.13. The issue arises in the function 'formSetDevNetName' within the file '/goform/SetDevNetName', where improper handling of the 'mac' argument allows for remote exploitation. This vulnerability has been publicly disclosed.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.