Tenda AC9 Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the Tenda AC9 router, specifically in version 1.0. This vulnerability arises from the device's configuration file, where the router fails to enforce length restrictions on individual fields. The issue occurs when the 'GetValue' function retrieves data from the configuration file and stores it on the stack. An attacker can exploit this by modifying the configuration file to include excessively long strings, which, when uploaded to the router, can lead to a stack-based buffer overflow. This exploitation can cause a permanent denial-of-service condition on the device.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, leading to a permanent denial-of-service condition on the device.