Tenda AC10 Buffer Overflow Vulnerability in fast_setting_wifi_set

A buffer overflow vulnerability has been identified in the Tenda AC10 router, version V15.03.06.23. The issue arises in the 'fast_setting_wifi_set' function, where the 'ssid' parameter is not properly validated, allowing for a buffer overflow condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the 'fast_setting_wifi_set' endpoint, including an overly long 'ssid' parameter. This can be done using a tool like curl or Postman, or by writing a simple script that sends the appropriate HTTP request.