Tenda AC10 Buffer Overflow Vulnerability in UserCongratulationsExec

A critical buffer overflow vulnerability has been identified in the Tenda AC10 router, specifically in version 16.03.10.13. The issue arises within the file '/goform/UserCongratulationsExec', where the 'getuid' argument can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, and both the technical details and a public proof-of-concept exploit are available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.