Tenda AC6 Stack-Based Buffer Overflow Vulnerability in WiFi Settings

A stack-based buffer overflow vulnerability has been identified in the Tenda AC6 router, specifically in version V15.03.05.16. The issue arises in the '/goform/fast_setting_wifi_set' file, where the 'timeZone' parameter can be manipulated to cause the overflow.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/goform/fast_setting_wifi_set' endpoint, including a 'timeZone' parameter that exceeds the expected length. This can be done using a tool like Burp Suite or by manually crafting the request with an oversized 'timeZone' value.