Tenda AC8V4 Stack-Based Buffer Overflow Vulnerability in WifiExtraSet Function

A stack-based buffer overflow vulnerability has been identified in the Tenda AC8V4 router, specifically in version V16.03.34.06. The issue arises in the function SUB_0046AC38 within the file /goform/WifiExtraSet. Exploitation of this vulnerability is possible through manipulation of the wpapsk_crypto argument.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can potentially allow for arbitrary code execution or cause a denial-of-service condition by crashing the device.