Tenda AC8 Buffer Overflow Vulnerability in WifiBasicSet Function

A buffer overflow vulnerability has been identified in the Tenda AC8 router, specifically in version 16.03.34.06. The issue arises within the WifiBasicSet function, where the security and security_5g parameters can be exploited to cause a stack overflow. This vulnerability was confirmed through code auditing and real-world testing.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, causing the router to crash and disconnect all connected devices. The router cannot be reconnected even after a reboot.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/WifiBasicSet' endpoint with a sufficiently long payload in the 'security' parameter. This causes the router to crash and disconnect all devices.