Tenda AC1206 Buffer Overflow Vulnerability in Wi-Fi Settings Function

A critical buffer overflow vulnerability has been identified in the Tenda AC1206 router, specifically in version 15.03.06.23. The issue arises in the 'form_fast_setting_wifi_set' function within the '/goform/fast_setting_wifi_set' file. The vulnerability can be exploited remotely by manipulating the 'ssid' and 'timeZone' arguments, potentially leading to arbitrary code execution. Other parameters may also be affected.

Impact

Exploitation of this vulnerability can lead to a buffer overflow, which may allow for arbitrary code execution on the affected device.