Tenda WH450 Stack-Based Buffer Overflow Vulnerability in Wireless Restart HTTP Request Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda WH450 router, specifically in the firmware version 1.0.0.18. The issue arises within the HTTP request handler for the '/goform/wirelessRestart' endpoint. This vulnerability can be exploited remotely by unauthenticated attackers, potentially leading to arbitrary code execution or causing a denial-of-service condition. The buffer overflow is triggered by manipulating the 'GO' parameter with excessively long input, allowing attackers to overwrite the stack and disrupt normal execution flow.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could be leveraged to execute arbitrary code or cause a denial-of-service condition on the affected device.

Reproduction

The vulnerability can be reproduced by sending a GET request to the '/goform/wirelessRestart' endpoint with the 'GO' parameter containing a payload longer than 42 bytes. This can be done using a script that automates the process, such as one written in Python that uses the 'requests' library to send the payload.