Tenda AC8V4 Stack-Based Buffer Overflow Vulnerability in WiFi Settings

A stack-based buffer overflow vulnerability has been identified in the Tenda AC8V4 router, specifically in version V16.03.34.06. The issue arises within the '/goform/fast_setting_wifi_set' endpoint, where the 'timeZone' parameter can be manipulated. This unrestricted input is processed by the 'form_fast_setting_wifi_set' function, leading to the overflow.

Impact

Exploitation of this vulnerability causes a stack overflow, which can potentially be leveraged for arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/fast_setting_wifi_set' endpoint. Include a 'ssid' parameter with a placeholder value and a 'timeZone' parameter filled with a crafted string that exceeds the buffer limit, such as 1000 bytes of 'A'.