Tenda AC10 Buffer Overflow Vulnerability in AdvSetMacMtuWan

A buffer overflow vulnerability has been identified in the Tenda AC10 router, specifically in the firmware version V4.0si_V16.03.10.20. The vulnerability arises in the AdvSetMacMtuWan function, where the wanMTU2 parameter can be manipulated to cause a stack overflow. This overflow allows remote, unauthenticated attackers to hijack the program's control flow.

Impact

Exploitation of this vulnerability leads to a stack overflow, causing a segmentation fault and allowing for control over the program's execution flow.

Reproduction

The vulnerability can be reproduced by sending a POST request to the 'AdvSetMacMtuWan' endpoint with the 'wanMTU2' parameter set to a value that exceeds the buffer size, such as a string of 'a' characters. This can be done using a Python script that automates the request.