Tenda AC7 Buffer Overflow Vulnerability in timeZone Parameter Allowing Remote Code Execution

A buffer overflow vulnerability has been identified in the Tenda AC7 router, specifically in version 1.0, release V15.03.06.44. The issue arises in the form_fast_setting_wifi_set function, where the timeZone parameter is improperly handled, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability can result in remote code execution on the affected device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the router's web interface that includes a specially formatted timeZone parameter. This parameter should be designed to overflow the buffer in the form_fast_setting_wifi_set function, which can be achieved by exceeding the expected length of the input. Once the buffer overflow is triggered, it can be exploited to execute arbitrary code on the device.