Tenda AC15 Stack Overflow Vulnerability in IP-MAC Binding Function

A stack overflow vulnerability has been identified in the Tenda AC15 router, specifically in version 15.03.05.19_multi_TD01. The issue arises in the 'fromSetIpMacBind' function, where the 'list' parameter can be manipulated to cause a stack overflow.

Impact

Exploitation of this vulnerability leads to a stack overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a POST request to 'http://192.168.100.254/goform/SetIpMacBind' with a cookie containing 'password=12345'. The request must include a 'list' parameter filled with a payload that overflows the stack, such as a string of 'a' characters repeated 65,536 times.