Tenda AC5 Buffer Overflow Vulnerability in AdvSetLanip Function

A critical buffer overflow vulnerability has been identified in the Tenda AC5 router, specifically in version 1.0/15.03.06.47. The issue arises in the AdvSetLanip form handler, where the lanMask parameter can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, and details of the exploit have been publicly disclosed.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can potentially lead to arbitrary code execution or a denial-of-service condition.