Tenda AC10U Buffer Overflow Vulnerability in POST Request Parameter Handler

A buffer overflow vulnerability has been identified in the Tenda AC10U router, specifically in versions 15.03.06.48 and 15.03.06.49. The issue arises in the POST request parameter handler, within the 'fromadvsetlanip' function of the '/goform/AdvSetLanip' file. The vulnerability is triggered by manipulating the 'lanMask' parameter, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.