Tenda AC18 Buffer Overflow Vulnerability in Reboot Timer Function

A critical buffer overflow vulnerability has been identified in the Tenda AC18 router, specifically in the firmware version 15.03.05.05. The issue arises in the 'formsetreboottimer' function within the file '/goform/SetSysAutoRebbotCfg'. The vulnerability can be exploited remotely by manipulating the 'rebootTime' parameter. This flaw has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.