Tenda AC18 Buffer Overflow Vulnerability in AdvSetLanip Function

A critical buffer overflow vulnerability has been identified in the Tenda AC18 router, specifically in the version 15.03.05.05. The issue arises in the AdvSetLanip form handler, where the lanMask parameter can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.