Tenda F3 Buffer Overflow Vulnerability in QoS Settings

A buffer overflow vulnerability has been identified in the Tenda F3 router, specifically in versions 12.01.01.48_multi and later. The issue arises in the QoS settings management, where the QosList parameter can be manipulated to cause a buffer overflow.

Impact

Exploitation of this vulnerability leads to a buffer overflow, causing the device to crash and resulting in a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/setQos endpoint. The request must include the QosList parameter, which can be crafted to exceed the buffer limit. This overflow causes the router to crash, demonstrating the denial-of-service impact.