Tenda A15 Buffer Overflow Vulnerability in Wireless Repeater Function

A buffer overflow vulnerability has been identified in the Tenda A15 router, specifically in version 15.13.07.13. The issue arises in the 'fromSetWirelessRepeat' function within the '/goform/openNetworkGateway' file. The vulnerability can be exploited remotely by manipulating the 'wpapsk_crypto2_4g' argument. This exploitation is made easier by the availability of a public proof-of-concept exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.