Tenda O3 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in the Tenda O3 router, specifically in the V1.0.0.10(2478) firmware. The issue arises in the '/goform/sysAutoReboot' endpoint, where the 'enable' POST parameter is accepted without proper length or content validation. This vulnerability can be exploited remotely, leading to potential arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/sysAutoReboot' endpoint with a crafted 'enable' parameter that exceeds the buffer limit. This can be done using a Python script that includes a payload of repeated characters. After the payload is accepted, send a POST request to the '/goform/getNetworkService' endpoint to trigger the overflow.