Tenda AC1206 Buffer Overflow Vulnerability in the formSetCfm Function

A critical buffer overflow vulnerability has been identified in the Tenda AC1206 router, affecting versions through 15.03.06.23. The issue arises in the formSetCfm function within the file /goform/setcfm. This vulnerability allows for remote exploitation, where an attacker can manipulate input to cause a buffer overflow, potentially leading to arbitrary code execution or causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the /goform/setcfm endpoint. The request must include an input buffer that exceeds the size of the output buffer, causing a buffer overflow. This can be done using a variety of tools or scripts that automate the process of sending such requests.