Tenda AC7 Stack-Based Buffer Overflow Vulnerability in Firewall Configuration

A critical stack-based buffer overflow vulnerability has been identified in the Tenda AC7 router, affecting versions prior to 15.03.06.44. The issue arises in the 'formSetFirewallCfg' function of the '/goform/SetFirewallCfg' file, where improper handling of the 'firewallEn' argument allows for remote exploitation.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/goform/SetFirewallCfg' endpoint, including a 'firewallEn' argument that exceeds the buffer size, causing a stack-based buffer overflow.