Tenda AC7 Buffer Overflow Vulnerability in PPTP Server Configuration

A critical buffer overflow vulnerability has been identified in the Tenda AC7 router running firmware version 15.03.06.44. The issue arises in the 'formSetPPTPServer' function within the file '/goform/SetPptpServerCfg'. The vulnerability is triggered by manipulating the 'pptp_server_start_ip' and 'pptp_server_end_ip' arguments, allowing for remote exploitation. The flaw occurs because the 'sscanf' function copies data from these arguments to internal variables without proper bounds checking, potentially leading to memory corruption. This vulnerability could cause a crash or even allow for remote code execution.

Impact

Exploitation of this vulnerability results in a buffer overflow, which can overwrite adjacent memory and potentially lead to arbitrary code execution.