Tenda W12 Null Pointer Dereference Vulnerability in HTTP Request Handler

A null pointer dereference vulnerability has been identified in the Tenda W12 access point running firmware version 3.0.0.6(3948). The issue arises in the HTTP request handler's 'wifiScheduledSet' function, where the application improperly validates user-controlled JSON input. This flaw allows remote attackers to send malformed HTTP requests that cause a denial-of-service condition by dereferencing a null pointer.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to crash or become unresponsive.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/modules' endpoint with a JSON payload that includes an empty 'wifiScheduledSet' object. The absence of a valid 'scheduledList' field in the payload triggers the null pointer dereference.