Tenda AC10 Buffer Overflow Vulnerability in AdvSetMacMtuWan

A buffer overflow vulnerability has been identified in the Tenda AC10 router, specifically in the AdvSetMacMtuWan function. This issue arises from improper handling of the mac2 key value, leading to a stack overflow via a strcpy operation. The vulnerability is present in version V4.0si_V16.03.10.20.

Impact

Exploitation of this vulnerability causes a stack overflow, allowing for control over the program's execution flow, which could lead to arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to the AdvSetMacMtuWan endpoint with the mac2 parameter set to a string of 'a' characters, approximately 768 bytes in length. This can be done using a Python script that automates the request.