Tenda AC20 Buffer Overflow Vulnerability in Parent Control Function

A buffer overflow vulnerability has been identified in the Tenda AC20 router, affecting firmware versions through 16.03.08.12. The issue arises in the '/goform/GetParentControlInfo' function, where the 'mac' argument is manipulated, leading to a stack overflow. This vulnerability can be exploited remotely, potentially causing a denial-of-service condition or allowing remote code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, leading to a stack overflow. This can disrupt normal device operation (denial-of-service) or be leveraged for remote code execution.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/goform/GetParentControlInfo' endpoint. The request must include a 'mac' parameter with a crafted value that exceeds the buffer size, causing a buffer overflow. This can be done using a variety of tools that allow for HTTP request manipulation, such as Postman or curl.