Tenda WH450 Stack-Based Buffer Overflow Vulnerability in SafeUrlFilter Endpoint

A stack-based buffer overflow vulnerability has been identified in the Tenda WH450 router, specifically in the firmware version 1.0.0.18. The issue arises within the HTTP request handler for the '/goform/SafeUrlFilter' endpoint, where excessive data lengths in the 'page' parameter can be manipulated, leading to remote exploitation. This vulnerability allows unauthenticated attackers to execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability allows for arbitrary code execution or the introduction of denial-of-service conditions on the affected device.

Reproduction

The vulnerability can be reproduced by sending a GET request to the '/goform/SafeUrlFilter' endpoint with an excessively long 'page' parameter. This can be done using a web browser or a tool like cURL or Postman. The Tenda WH450 router must be running firmware version 1.0.0.18.