Tenda AC8 Stack Overflow Vulnerability in get_parentControl_list_Info Function

A stack overflow vulnerability has been identified in the Tenda AC8 router, specifically in version V16.03.34.06. The issue arises in the get_parentControl_list_Info function, where the deviceid parameter is improperly handled, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes a stack overflow, which can lead to arbitrary code execution or a denial-of-service condition, depending on the attacker's intent and the device's firmware.

Reproduction

To reproduce this vulnerability, send a request to the router's get_parentControl_list_Info function with a crafted deviceid parameter that exceeds the expected length. This can be done using a tool like Burp Suite or by manually crafting the request with an oversized deviceid value.