Tenda WH450 Stack-Based Buffer Overflow Vulnerability in RouteStatic Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda WH450 router running firmware version 1.0.0.18. This vulnerability resides in the '/goform/RouteStatic' HTTP request handler, where excessive data lengths in the 'page' parameter can be manipulated to cause the overflow. The vulnerability can be exploited remotely by unauthenticated attackers, potentially leading to arbitrary code execution or causing denial-of-service conditions.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which can be leveraged to execute arbitrary code or cause a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a GET request to the '/goform/RouteStatic' endpoint with the 'page' parameter containing more than 235 bytes of data. This can be done using a web browser or a tool like curl or Postman. The excess data will trigger the buffer overflow by exceeding the parameter's length limit.