Tenda AC7 Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in the Tenda AC7 router, specifically in firmware version V15.03.06.44. This vulnerability allows remote attackers to execute arbitrary code by exploiting a stack overflow through the security parameter of the formWifiBasicSet function.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the formWifiBasicSet function, including a specially designed security parameter that triggers the stack-based buffer overflow.