Tenda AC8V4 Heap Overflow Vulnerability in Parent Control Information Function

A heap overflow vulnerability has been identified in the Tenda AC8V4 router, specifically in version V16.03.34.06. The issue arises in the '/goform/GetParentControlInfo' function, where the 'mac' parameter from POST requests is processed without proper length validation. This oversight allows for an arbitrarily long string to be copied to the heap using 'strcpy', potentially leading to a heap-based buffer overflow.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can commonly lead to arbitrary code execution or memory corruption.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/GetParentControlInfo' endpoint with the 'mac' parameter containing a payload of approximately 2000 bytes. This oversized input exploits the lack of length restrictions, causing a heap overflow.