Tenda i12 Buffer Overflow Vulnerability in formwrlSSIDset Function

A buffer overflow vulnerability has been identified in the Tenda i12 router, specifically in version 1.0.0.10(3805). The issue arises in the formwrlSSIDset function, where the list parameter is improperly handled, leading to potential memory corruption.

Impact

Exploitation of this vulnerability allows for a buffer overflow, which can commonly lead to arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the formwrlSSIDset function with a specially crafted list parameter that exceeds the buffer size, causing a buffer overflow.